Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.
https://exchange.xforce.ibmcloud.com/vulnerabilities/19826
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0878
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG