PT-2013-1604 · Dnsmasq+3 · Dnsmasq+3

David Woodhouse · Published 2013-02-20 · Updated 2023-02-13 · CVE-2012-3411

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Dnsmasq versions prior to 2.63test1

Description The issue allows remote attackers to cause a denial of service, specifically through traffic amplification, by sending a spoofed DNS query. This occurs when Dnsmasq is used with certain configurations in libvirt and responds to requests from prohibited interfaces.

Recommendations For versions prior to 2.63test1, update to version 2.63test1 or later to resolve the issue. As a temporary workaround, consider restricting access to the DNS service to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2013_0276

CESA-2013_0277

CVE-2012-3411

RHSA-2013:0276

RHSA-2013:0277

RHSA-2013:0579

RHSA-2013_0276

RHSA-2013_0277

Affected Products

Centos

Dnsmasq

Red Hat

Libvirt

References · 39

• http://rhn.redhat.com/errata/RHSA-2013-0277.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3411 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-3411 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-3411 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3411 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-0276.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=833033 · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2013:072 · Vendor Advisory
• http://thekelleys.org.uk/dnsmasq/CHANGELOG · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0579.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-0276.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3411 · Security Note
• https://linux.oracle.com/errata/ELSA-2013-0277.html · Vendor Advisory
• https://lists.centos.org/pipermail/centos-cr-announce/2013-February/020130.html · Note
• http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=2f38141f434e23292f84cefc33e8de76fb856147 · Note