Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86760.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-86760
Upstream
Published
2026-05-11T18:16:41Z
Modified
2026-09-10T05:28:36Z
Summary
CVE-2026-4893 affecting package dnsmasq for versions less than 2.92-1
Details

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.

References

Affected packages

Azure Linux:3 / dnsmasq

Package

Name
dnsmasq
Purl
pkg:rpm/azure-linux/dnsmasq

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.92-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86760.json"