CVE-2013-0198: Thekelleys Dnsmasq

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3411.

Affected products

• Thekelleys Dnsmasq: up to and including 2.65

Published 2013-03-05. Last modified 2026-06-16.