CVE-2013-0198

2013-03-0500:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

78.5%

JSON

Dnsmasq before 2.66test2, when used with certain libvirt configurations,
replies to queries from prohibited interfaces, which allows remote
attackers to cause a denial of service (traffic amplification) via spoofed
TCP based DNS queries. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2012-3411.

Bugs

Notes

Author	Note
mdeslaur	may introduce changes in behaviour, see https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1126488 we will not be fixing this in Ubuntu 12.04 LTS, users in environments where this issue is problematic are recommended to upgrade to a more recent LTS release.

OSVersionArchitecturePackageVersionFilename
ubuntu13.04noarchdnsmasq< 2.65-1ubuntu1UNKNOWN
ubuntu13.10noarchdnsmasq< 2.65-1ubuntu1UNKNOWN
ubuntu14.04noarchdnsmasq< 2.65-1ubuntu1UNKNOWN
ubuntu14.10noarchdnsmasq< 2.65-1ubuntu1UNKNOWN
ubuntu15.04noarchdnsmasq< 2.65-1ubuntu1UNKNOWN
ubuntu15.10noarchdnsmasq< 2.65-1ubuntu1UNKNOWN
ubuntu16.04noarchdnsmasq< 2.65-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	13.04	noarch	dnsmasq	< 2.65-1ubuntu1	UNKNOWN
ubuntu	13.10	noarch	dnsmasq	< 2.65-1ubuntu1	UNKNOWN
ubuntu	14.04	noarch	dnsmasq	< 2.65-1ubuntu1	UNKNOWN
ubuntu	14.10	noarch	dnsmasq	< 2.65-1ubuntu1	UNKNOWN
ubuntu	15.04	noarch	dnsmasq	< 2.65-1ubuntu1	UNKNOWN
ubuntu	15.10	noarch	dnsmasq	< 2.65-1ubuntu1	UNKNOWN
ubuntu	16.04	noarch	dnsmasq	< 2.65-1ubuntu1	UNKNOWN