Skip to content
Sign in
4.3 Medium

CVE-2026-93010 Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check

Description

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The feature is off unless an administrator turns it on.

CVSS 3.1 detail

Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitable from the adjacent network, without an account and without any user action; the impact on data or service is limited.

Attack vector
Adjacent network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Affected products and versions

Product Affected versions Fixed in
Red Hat Ceph Storage 9 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat OpenStack Platform 13 (Queens) Versions not published
Red Hat OpenStack Platform 18.0 Versions not published
Show the other branch
Product Affected versions Fixed in
Red Hat OpenShift Container Platform 5 Versions not published

Other CVEs of Red Hat Ceph Storage 9

The 38 CVEs of Red Hat Ceph Storage 9 →
CVE-2026-93009 Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder 4.3 Medium CVE-2026-93006 Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content 6.8 Medium CVE-2026-93007 Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation 5.3 Medium CVE-2026-93011 Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms 5.3 Medium
Track this CVE