Improper input validation in Thekelleys Dnsmasq
CVE-2013-0198
Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3411.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.
Affected products
- Thekelleys Dnsmasq
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (Exploit, Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)