CVE-2012-3411

Publication date 5 March 2013

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query.

Read the notes from the security team

Status

Package Ubuntu Release Status
dnsmasq 13.10 saucy
Not affected
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise Ignored
11.10 oneiric Ignored end of life
11.04 natty Ignored
10.04 LTS lucid Ignored
8.04 LTS hardy Ignored end of life
libvirt 13.10 saucy
Not affected
13.04 raring
Not affected
12.10 quantal Ignored
12.04 LTS precise Ignored
11.10 oneiric Ignored end of life
11.04 natty Ignored
10.04 LTS lucid Ignored
8.04 LTS hardy Ignored end of life

Notes

jdstrand

patch sent upstream but not yet sent upstream or in the git repository (http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=summary)

mdeslaur

upstream has added a new --bind-dynamic option in 2.63 instead of using the RH patch. libvirt needs to be modified to use --bind-dynamic also.

seth-arnold

(pt2) fixes a likely FTBFS introduced by (pt1) -- there may be more, the commit message didn't make finding this one easy

mdeslaur

changes are intrusive and may introduce behaviour changes in stable releases. We will not be backporting this fix. Marking as ignored.