National Cyber Awareness System

Vulnerability Summary for CVE-2012-3411

Overview

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=54dd393f3938fc0c19088fbd319b95e37d81a2b0

Type: Patch Information; Exploit

Hyperlink:http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=54dd393f3938fc0c19088fbd319b95e37d81a2b0

External Source: MISC

Name: https://bugzilla.redhat.com/show_bug.cgi?id=833033

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=833033

External Source: CONFIRM

Name: http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

Hyperlink:http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

External Source: BID

Name: 54353

Hyperlink:http://www.securityfocus.com/bid/54353

External Source: MLIST

Name: [oss-security] 20120712 Re: Re: CVE Request -- dnsmasq: When being run by libvirt open DNS proxy (reachable out-of the virtual network set for the particular guest domain too) is created

Hyperlink:http://www.openwall.com/lists/oss-security/2012/07/12/5

External Source: CONFIRM

Name: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=2f38141f434e23292f84cefc33e8de76fb856147

Hyperlink:http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=2f38141f434e23292f84cefc33e8de76fb856147

External Source: REDHAT

Name: RHSA-2013:0579

Hyperlink:http://rhn.redhat.com/errata/RHSA-2013-0579.html

External Source: REDHAT

Name: RHSA-2013:0277

Hyperlink:http://rhn.redhat.com/errata/RHSA-2013-0277.html

External Source: REDHAT

Name: RHSA-2013:0276

Hyperlink:http://rhn.redhat.com/errata/RHSA-2013-0276.html

External Source: MISC

Name: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683372

Hyperlink:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683372