CVE-2007-3409
CVE-2007-3409
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.
CVSS 7.5 · High · EPSS 3.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libnet-dns-perl Debian:12
- Affected ranges
- ECOSYSTEM: < 0.60-1
Update to 0.60-1
libnet-dns-perl Debian:13
- Affected ranges
- ECOSYSTEM: < 0.60-1
Update to 0.60-1
libnet-dns-perl Debian:14
- Affected ranges
- ECOSYSTEM: < 0.60-1
Update to 0.60-1
Original sources
- http://secunia.com/advisories/26231
- http://secunia.com/advisories/26417
- http://secunia.com/advisories/29354
- http://secunia.com/advisories/26014
- http://secunia.com/advisories/26012
- http://rt.cpan.org/Public/Bug/Display.html?id=27285
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10595
- http://www.debian.org/security/2008/dsa-1515
- http://www.net-dns.org/docs/Changes.html
- http://www.securitytracker.com/id?1018376
- http://www.novell.com/linux/security/advisories/2007_17_sr.html
- http://secunia.com/advisories/26543
- http://www.ubuntu.com/usn/usn-483-1
- http://www.trustix.org/errata/2007/0023/
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:146
- http://www.redhat.com/support/errata/RHSA-2007-0674.html
- http://secunia.com/advisories/26055
- http://secunia.com/advisories/26211
- http://secunia.com/advisories/26075
- http://www.securityfocus.com/bid/24669
- http://osvdb.org/37054
- http://secunia.com/advisories/25829
- http://www.gentoo.org/security/en/glsa/glsa-200708-06.xml
- https://nvd.nist.gov/vuln/detail/CVE-2007-3409