Every CVESearch/Get API key

CVE-2012-3411

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from...

5.0 MediumFix available

CVE-2012-3411 is a medium vulnerability (CVSS 5.0) in Thekelleys Dnsmasq, published March 4, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.07%, the 92nd percentile. Fixed in dnsmasq 2.63-1.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
5.07%EPSS, 92nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.63-1dnsmasq +40 more

Description

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Exploit likelihood

5.07%Up 2.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dnsmasq
Debian:12
before 2.63-1
2.63-1
dnsmasq
Debian:13
before 2.63-1
2.63-1
dnsmasq
Debian:14
before 2.63-1
2.63-1
libvirt
Red Hat:enterprise_linux:6::client
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-debuginfo
Red Hat:enterprise_linux:6::client
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::client
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::client
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::client
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::client
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt
Red Hat:enterprise_linux:6::computenode
before 0:0.10.2-18.el6
0:0.10.2-18.el6
Show 31 moreShow less
Affected packages
PackageAffectedFixed
libvirt-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::computenode
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::computenode
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::computenode
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:storage:3:server:el6
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt
Red Hat:enterprise_linux:6::server
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-debuginfo
Red Hat:enterprise_linux:6::server
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::server
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::server
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::server
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::server
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt
Red Hat:enterprise_linux:6::workstation
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::workstation
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::workstation
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::workstation
before 0:0.10.2-18.el6
0:0.10.2-18.el6
dnsmasq
Red Hat:enterprise_linux:6::client
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::client
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::client
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq
Red Hat:enterprise_linux:6::computenode
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::computenode
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq
Red Hat:enterprise_linux:6::server
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::server
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::server
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq
Red Hat:enterprise_linux:6::workstation
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::workstation
before 0:2.48-13.el6
0:2.48-13.el6
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 3 CVEs
before 0:6.4-20130221.0.el6
0:6.4-20130221.0.el6

What each source reports

NVD Score used5.0

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
CVE-2012-3411
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
CVE-2012-3411
Updated
2026-11-02
EUVDEUVD-2012-3381No score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
EUVD-2012-3381
Updated
2026-11-03
GitHub AdvisoriesGHSA-gj79-j4q7-5h4xNo score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from...

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
GHSA-gj79-j4q7-5h4x
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
CVE-2012-3411
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3411No score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
DEBIAN-CVE-2012-3411
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 79 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open