CVE-2013-0198

Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3411.

• CWE-20

• http://www.mandriva.com/security/advisories?name=MDVSA-2013:072Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/01/18/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/01/18/7Mailing List, Third Party Advisory
• http://www.thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=22ce550e5346947a12a781ed0959a7b1165d0dc6
• https://bugzilla.redhat.com/show_bug.cgi?id=894486Exploit, Issue Tracking, Patch, Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:072Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/01/18/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/01/18/7Mailing List, Third Party Advisory
• http://www.thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=22ce550e5346947a12a781ed0959a7b1165d0dc6
• https://bugzilla.redhat.com/show_bug.cgi?id=894486Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Mar 5, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0192File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Foru…4.9
• CVE-2013-0193Cross-site Scripting (XSS) in Piwik before 1.10.1 allows rem…6.1
• CVE-2013-0194Cross-site Scripting (XSS) in Piwik before 1.10.1 allows rem…6.1
• CVE-2013-0195Cross-site Scripting (XSS) in Piwik before 1.10.1 allows rem…6.1
• CVE-2013-0196A CSRF issue was found in OpenShift Enterprise 1.2. The web …6.5
• CVE-2013-0197Cross-site scripting (XSS) vulnerability in the filter_draw_…
• CVE-2013-0199The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not res…
• CVE-2013-0200HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows …
• CVE-2013-0201Multiple cross-site scripting (XSS) vulnerabilities in ownCl…
• CVE-2013-0202Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, …6.1
• CVE-2013-0203Multiple cross-site scripting (XSS) vulnerabilities in ownCl…5.4
• CVE-2013-0204settings/personal.php in ownCloud 4.5.x before 4.5.6 allows …