CVE-2026-93010 PUBLISHED

Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check

Assigner: redhat
Reserved: 17.09.2026 Published: 29.10.2026 Updated: 29.10.2026

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The feature is off unless an administrator turns it on.

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 4.3

Product Status

Vendor Red Hat
Product Red Hat Ceph Storage 9
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 10
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Container Platform 4
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenStack Platform 13 (Queens)
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenStack Platform 18.0
Versions Default: affected

Workarounds

The following measures reduce risk:

  1. Prefer --leasequery=<addr>[/prefix] so only designated relays may query.
  2. If leasequery is not needed, do not enable it. It is off by default.
  3. If unrestricted leasequery is required, use firewall rules to limit which hosts can send DHCP packets to dnsmasq.

Credits

  • Red Hat would like to thank Shubham Raj (Causal Security) for reporting this issue.

References

Problem Types

  • Missing Authorization CWE