The article discusses concerns raised in the oss-sec mailing list regarding new CVE entries for dnsmasq, which require replacing the default configuration file to exploit. Moritz Mühlenhoff highlights that such vulnerabilities are questionable, as direct configuration changes would negate the need for exploiting the parser. The same issue is noted with vulnerabilities reported for the Kamailio SIP server.
dnsmasq ✓
+ cve
security ✓