Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-3411

Опубликовано: 09 июл. 2012
Источник: redhat
CVSS2: 5
EPSS Низкий

Описание

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Отчет

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5dnsmasqWill not fix
Red Hat Enterprise Linux 6libvirtFixedRHSA-2013:027620.02.2013
Red Hat Enterprise Linux 6dnsmasqFixedRHSA-2013:027720.02.2013
Red Hat Storage 3 for RHEL 6libvirtFixedRHSA-2013:027620.02.2013
RHEV 3.X Hypervisor and Agents for RHEL-6rhev-hypervisor6FixedRHSA-2013:057928.02.2013

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=833033libvirt+dnsmasq: DNS configured to answer DNS queries from non-virtual networks

EPSS

Процентиль: 78%
0.01144
Низкий

5 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 12 лет назад

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

nvd
больше 12 лет назад

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

debian
больше 12 лет назад

Dnsmasq before 2.63test1, when used with certain libvirt configuration ...

github
больше 3 лет назад

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

oracle-oval
больше 12 лет назад

ELSA-2013-0277: dnsmasq security, bug fix and enhancement update (MODERATE)

EPSS

Процентиль: 78%
0.01144
Низкий

5 Medium

CVSS2