CVE-2026-14461

A flaw was found in mtr. A remote attacker, by influencing the DNS (Domain Name System) TXT response used for AS (Autonomous System) lookups, can trigger an out-of-bound read vulnerability in the ipinfo_lookup() function. This occurs when a DNS response larger than 512 bytes contains a crafted compression pointer in the answer NAME field. Successful exploitation leads to a reliable crash of the mtr application, resulting in a Denial of Service.

In Red Hat Enterprise Linux, this flaw is evaluated as having a Moderate impact because mtr is a transient, interactive diagnostic tool rather than a network-facing service, limiting the failure scope strictly to process termination. Triggering the defect requires a user to explicitly initiate routing traces with Autonomous System lookups enabled against a compromised or spoofed name server. Because the flaw only causes an abnormal process termination without allowing code execution or data exposure, system integrity and other services remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.