Log in Start free

Vulnerability · Published Oct 29, 2026 · Assigned by redhat

CVE-2026-93011Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms

Medium 5.3

In plain English

A medium-severity out-of-bounds write in Red Hat Ceph Storage 9 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.6%top 49.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and from DNS wire format. An attacker who can cause the server to validate a crafted DNSSEC response may overwrite a small amount of adjacent heap metadata. DNSSEC support is not compiled in by default and must also be enabled at runtime.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12dnsmasqno fix listedDEBIAN-CVE-2026-93011
Debian:13dnsmasqno fix listedDEBIAN-CVE-2026-93011
Debian:14dnsmasqno fix listedDEBIAN-CVE-2026-93011
Ubuntu:22.04:LTSdnsmasqno fix listedUBUNTU-CVE-2026-93011
Ubuntu:24.04:LTSdnsmasqno fix listedUBUNTU-CVE-2026-93011
Ubuntu:26.04:LTSdnsmasqno fix listedUBUNTU-CVE-2026-93011
Ubuntu:26.10dnsmasqno fix listedUBUNTU-CVE-2026-93011

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Ceph Storage 9 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 5 see references
Red Hat Red Hat OpenShift Container Platform 5 see references
Red Hat Red Hat OpenStack Platform 13 (Queens) see references
Red Hat Red Hat OpenStack Platform 18.0 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References