{"id":"CVE-2026-93011","aliases":[],"cve":{"records":[{"id":"CVE-2026-93011","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-17T14:35:34.562Z","published":"2026-10-29T12:47:10.170Z","modified":"2026-10-30T06:04:34.857Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-10-30T06:04:34.857Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T14:07:20.766Z"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-93011","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2536082","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"}],"weaknesses":[{"id":"CWE-787","description":"Out-of-bounds Write","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T14:07:10.217144Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and from DNS wire format. An attacker who can cause the server to validate a crafted DNSSEC response may overwrite a small amount of adjacent heap metadata. DNSSEC support is not compiled in by default and must also be enabled at runtime.","score":5.3,"severity":"medium","published":"2026-10-29T12:47:10.170Z","modified":"2026-10-30T06:04:34.857Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Ceph Storage 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:ceph_storage:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 5","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:5"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 5","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:5"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenStack Platform 13 (Queens)","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openstack:13"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"},{"vendor":"Red Hat","name":"Red Hat OpenStack Platform 18.0","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openstack:18.0"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"}],"remediation":[{"text":"The following measures reduce risk:\n\n1. Do not enable --dnssec or --trust-anchor unless DNSSEC validation is required.\n2. Omit -DHAVE_DNSSEC from COPTS (this is the default build).\n3. If DNSSEC validation is required, restrict dnsmasq to trusted upstream resolvers.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"}],"references":["https://access.redhat.com/security/cve/CVE-2026-93011","https://bugzilla.redhat.com/show_bug.cgi?id=2536082"],"sources":[{"name":"CVE","id":"CVE-2026-93011","modified":"2026-10-30T06:04:34.857Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","score":5.3}],"sourceAffected":[],"observedAt":"2026-10-30T06:31:01.220Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:05:32.453Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-10-29T13:05:34.175Z","attemptedAt":"2026-10-29T13:05:34.175Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-29T13:05:34.164Z","attemptedAt":"2026-10-29T13:05:34.164Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T13:05:35.086Z","attemptedAt":"2026-10-29T13:05:35.086Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-29T13:05:33.756Z","attemptedAt":"2026-10-29T13:05:33.756Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-112789","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112789","modified":"Oct 29, 2026, 12:47:10 PM","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","checkedAt":"2026-10-29T13:05:35.086Z"}],"aiSummary":{"text":"A heap out-of-bounds write flaw in dnsmasq's DNSSEC validator can occur when converting names to and from DNS wire format, potentially overwriting adjacent heap metadata. An attacker who can cause the server to validate a crafted DNSSEC response may exploit this. DNSSEC support must be enabled at runtime and is not compiled in by default.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:01:17.128Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-93011"}]}}