CVE-2012-3411
Fixed in a distro release EPSS 5%
Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.
Products: thekelleys dnsmasq, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dnsmasq | 2.63-1 |
| Debian 13 | dnsmasq | 2.63-1 |
| Debian 14 | dnsmasq | 2.63-1 |
| Red Hat Enterprise Linux 6 | dnsmasq | 0:2.48-13.el6 |
| Red Hat Enterprise Linux 6 | dnsmasq-debuginfo | 0:2.48-13.el6 |
| Red Hat Enterprise Linux 6 | dnsmasq-utils | 0:2.48-13.el6 |
| Red Hat Enterprise Linux 6 | libvirt | 0:0.10.2-18.el6 |
| Red Hat Enterprise Linux 6 | libvirt-client | 0:0.10.2-18.el6 |
| Red Hat Enterprise Linux 6 | libvirt-debuginfo | 0:0.10.2-18.el6 |
| Red Hat Enterprise Linux 6 | libvirt-devel | 0:0.10.2-18.el6 |
| Red Hat Enterprise Linux 6 | libvirt-lock-sanlock | 0:0.10.2-18.el6 |
| Red Hat Enterprise Linux 6 | libvirt-python | 0:0.10.2-18.el6 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.4-20130221.0.el6 |
| Red Hat storage 3 server el6 | libvirt-lock-sanlock | 0:0.10.2-18.el6 |