CVE-2007-3409

Опубликовано: 26 июн. 2007

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Средний

Описание

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc
Broken Link
http://osvdb.org/37054
Broken Link
http://rt.cpan.org/Public/Bug/Display.html?id=27285
Broken Link
http://secunia.com/advisories/25829
Broken Link
http://secunia.com/advisories/26012
Broken Link
http://secunia.com/advisories/26014
Broken Link
http://secunia.com/advisories/26055
Broken Link
http://secunia.com/advisories/26075
Broken Link
http://secunia.com/advisories/26211
Broken Link
http://secunia.com/advisories/26231
Broken Link
http://secunia.com/advisories/26417
Broken Link
http://secunia.com/advisories/26543
Broken Link
http://secunia.com/advisories/29354
Broken Link
http://www.debian.org/security/2008/dsa-1515
Mailing List
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200708-06.xml
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:146
Third Party Advisory
http://www.net-dns.org/docs/Changes.html
Release Notes
http://www.novell.com/linux/security/advisories/2007_17_sr.html
Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0674.html
Broken Link
http://www.securityfocus.com/archive/1/473871/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:net-dns:net\:\:dns:*:*:*:*:*:*:*:*

Версия до 0.60 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12389

Средний

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-674

Связанные уязвимости

CVE-2007-3409

CVSS3: 7.5

ubuntu

около 18 лет назад

CVE-2007-3409

redhat

больше 18 лет назад

CVE-2007-3409

CVSS3: 7.5

debian

около 18 лет назад

Net::DNS before 0.60, a Perl module, allows remote attackers to cause ...

GHSA-vf3x-8mv3-rv64

github

больше 3 лет назад

ELSA-2007-0674

oracle-oval

около 18 лет назад

ELSA-2007-0674: Moderate: perl-Net-DNS security update (MODERATE)

EPSS

Процентиль: 94%

0.12389

Средний

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-674