{"id":"AZL-112421","summary":"CVE-2026-93011 affecting package dnsmasq 2.93-1","details":"A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and from DNS wire format. An attacker who can cause the server to validate a crafted DNSSEC response may overwrite a small amount of adjacent heap metadata. DNSSEC support is not compiled in by default and must also be enabled at runtime.","modified":"2026-11-03T05:33:06Z","published":"2026-10-29T13:17:16Z","upstream":["CVE-2026-93011"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93011"}],"affected":[{"package":{"name":"dnsmasq","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/dnsmasq"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.93-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112421.json"}}],"schema_version":"1.9.2"}