Every CVE Search/ Get API key

CVE-2012-3411

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from...

5.0 MediumFix available

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Exploit likelihood

5.07%Up 2.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
CVE-2012-3411
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
CVE-2012-3411
Updated
2026-11-02
EUVDEUVD-2012-3381 No score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
EUVD-2012-3381
Updated
2026-11-03
GitHub AdvisoriesGHSA-gj79-j4q7-5h4x No score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from...

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
GHSA-gj79-j4q7-5h4x
Weakness
CWE-20
Updated
2026-11-02
OSV No score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
CVE-2012-3411
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3411 No score

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Record
DEBIAN-CVE-2012-3411
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dnsmasq
Debian:12
 before 2.63-1
2.63-1
dnsmasq
Debian:13
 before 2.63-1
2.63-1
dnsmasq
Debian:14
 before 2.63-1
2.63-1
libvirt
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::client
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
Show 31 moreShow less
Affected packages
PackageAffectedFixed
libvirt-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::computenode
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:storage:3:server:el6
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::server
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-lock-sanlock
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-client
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
libvirt-python
Red Hat:enterprise_linux:6::workstation
 before 0:0.10.2-18.el6
0:0.10.2-18.el6
dnsmasq
Red Hat:enterprise_linux:6::client
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::client
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq
Red Hat:enterprise_linux:6::computenode
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::computenode
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq
Red Hat:enterprise_linux:6::server
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::server
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq
Red Hat:enterprise_linux:6::workstation
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.48-13.el6
0:2.48-13.el6
dnsmasq-utils
Red Hat:enterprise_linux:6::workstation
 before 0:2.48-13.el6
0:2.48-13.el6
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 3 CVEs
 before 0:6.4-20130221.0.el6
0:6.4-20130221.0.el6

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-3411 is a medium vulnerability (CVSS 5.0) in Thekelleys Dnsmasq, published March 4, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.07%, the 92nd percentile. Fixed in dnsmasq 2.63-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 79 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open