Are these real CVEs? VulDB entries for dnsmasq rely on replacing config files