CVE-2013-0198

Publication date 5 March 2013

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3411.

Read the notes from the security team

Status

Package Ubuntu Release Status
dnsmasq 16.04 LTS xenial
Fixed 2.65-1ubuntu1
15.10 wily
Fixed 2.65-1ubuntu1
15.04 vivid
Fixed 2.65-1ubuntu1
14.10 utopic
Fixed 2.65-1ubuntu1
14.04 LTS trusty
Fixed 2.65-1ubuntu1
13.10 saucy
Fixed 2.65-1ubuntu1
13.04 raring
Fixed 2.65-1ubuntu1
12.10 quantal Ignored end of life
12.04 LTS precise Ignored
11.10 oneiric Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life

Notes

mdeslaur

may introduce changes in behaviour, see https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1126488 we will not be fixing this in Ubuntu 12.04 LTS, users in environments where this issue is problematic are recommended to upgrade to a more recent LTS release.