CVE-2025-12200

A flaw was found in dnsmasq. A local attacker could exploit a null pointer dereference vulnerability in the parse_dhcp_opt function within the Config File Handler component by manipulating an argument. This could lead to a denial of service.

This CVE has been marked as Rejected by the assigning CNA.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.

To reduce the risk, restrict write access to the dnsmasq.conf file and related configuration directories to trusted, privileged users only. Ensure that no untrusted process or user can modify DHCP or SIP-related options in the configuration. Deploy integrity monitoring or configuration management tools to detect unauthorized changes before restart.