CVE:CVE-2012-3411
CNNVD:CNNVD-201207-080
Dnsmasq是软件开发者Simon Kelley所研发的一款使用C语言编写的开源轻量级DNS转发和DHCP、TFTP服务器。
Dnsmasq 2.63test1之前版本中存在漏洞，该漏洞源于程序与某些libvirt配置使用时，回复来自禁止接口的请求。通过伪造的DNS查询，远程攻击者利用该漏洞导致拒绝服务漏洞（流量扩增）。
solution:Upgrade thekelleys dnsmasq to a higher version than 2.62,and avoid the version (,2.62]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0