CVE-2012-3411: Input Validation
First published: Mon Jun 18 2012(Updated: )
Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| dnsmasq | <=2.62 | |
| redhat enterprise Linux desktop | =6.0 | |
| redhat enterprise Linux server | =6.0 | |
| redhat enterprise Linux workstation | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=592634&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=592634&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c3
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c7
- http://lists.freebsd.org/pipermail/freebsd-net/2007-March/013510.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=838528
- http://www.openwall.com/lists/oss-security/2012/07/09/1
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c13
- http://www.openwall.com/lists/oss-security/2012/07/12/5
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=640706&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=640706&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c31
- https://brewweb.devel.redhat.com/taskinfo?taskID=5062119
- https://brewweb.devel.redhat.com/taskinfo?taskID=5062147
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c33
- http://koji.fedoraproject.org/koji/buildinfo?buildID=361763
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c37
- https://www.redhat.com/archives/libvir-list/2012-November/msg00942.html
- https://access.redhat.com/security/cve/CVE-2012-3411
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=882309
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c39
- http://libvirt.org/formatnetwork.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c59
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=904940
- https://rhn.redhat.com/errata/RHSA-2013-0277.html
- https://rhn.redhat.com/errata/RHSA-2013-0579.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c65
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c66
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=833033#c62
- https://access.redhat.com/support/policy/updates/errata/
- https://bugzilla.redhat.com/show_bug.cgi?id=833033
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683372
- http://rhn.redhat.com/errata/RHSA-2013-0276.html
- http://rhn.redhat.com/errata/RHSA-2013-0277.html
- http://rhn.redhat.com/errata/RHSA-2013-0579.html
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=2f38141f434e23292f84cefc33e8de76fb856147
- http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=54dd393f3938fc0c19088fbd319b95e37d81a2b0
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:072
- http://www.securityfocus.com/bid/54353
- http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
Frequently Asked Questions
What is the severity of CVE-2012-3411?
CVE-2012-3411 has a severity associated with denial of service due to potential traffic amplification.
How do I fix CVE-2012-3411?
To fix CVE-2012-3411, update to a version of dnsmasq newer than 2.63test1.
Who is affected by CVE-2012-3411?
CVE-2012-3411 affects users of dnsmasq versions prior to 2.63test1, especially with specific libvirt configurations.
What type of attack does CVE-2012-3411 facilitate?
CVE-2012-3411 facilitates denial of service attacks through traffic amplification via spoofed DNS queries.
Is CVE-2012-3411 a local or remote vulnerability?
CVE-2012-3411 is a remote vulnerability that allows attackers to exploit it from a distance.
- collector/redhat-bugzilla
- alias/CVE-2012-3411
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/description
- agent/author
- agent/references
- agent/remedy
- agent/severity
- agent/weakness
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/thekelleys
- canonical/dnsmasq
- version/dnsmasq/2.62
- vendor/redhat
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/6.0
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/6.0
- canonical/redhat enterprise linux workstation
- version/redhat enterprise linux workstation/6.0