CVE-2012-3411: Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibite...

Security readout for executives and security teams

This issue can make some virtualization hosts act like unintended DNS amplifiers. If dnsmasq is used with certain libvirt configurations, it may answer DNS requests from interfaces that should be prohibited, enabling denial-of-service amplification against others. Exposure is most likely on hosts running vulnerable dnsmasq versions with libvirt-managed virtual networks. General dnsmasq deployments should be assessed, but the CVE specifically ties impact to certain libvirt configurations. Prioritize this on virtualization infrastructure exposed to untrusted networks. Business risk is service abuse and reputational impact from amplification traffic, not confirmed compromise of host data. Mitigation focus: Apply relevant vendor updates from Red Hat, Mandriva, or your distribution.; Upgrade dnsmasq to a fixed release at or beyond 2.63test1 where applicable.; Review libvirt-managed dnsmasq exposure against vendor guidance..

Prepared

Jun 15, 2026, 04:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.