CVE-2007-3409: High severity Nlnet Labs Net Dns vulnerability
Published Jun 26, 2007
·Updated
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.
Affected Software
69 affected components
Nlnet Labs Net Dns=0.48_03
Nlnet Labs Net Dns=0.46
Nlnet Labs Net Dns=0.24
Nlnet Labs Net Dns=0.45_01
Nlnet Labs Net Dns=0.42_02
Nlnet Labs Net Dns=0.35
Nlnet Labs Net Dns=0.48_01
Nlnet Labs Net Dns=0.59
Nlnet Labs Net Dns=0.34_02
Nlnet Labs Net Dns=0.14
Nlnet Labs Net Dns=0.51
Nlnet Labs Net Dns=0.41
Nlnet Labs Net Dns=0.49
Nlnet Labs Net Dns=0.47
Nlnet Labs Net Dns=0.29
Nlnet Labs Net Dns=0.23
Nlnet Labs Net Dns=0.38
Nlnet Labs Net Dns=0.42
Nlnet Labs Net Dns=0.49_03
Nlnet Labs Net Dns=0.37
Nlnet Labs Net Dns=0.38_02
Nlnet Labs Net Dns=0.33
Nlnet Labs Net Dns=0.58
Nlnet Labs Net Dns=0.44
Nlnet Labs Net Dns=0.40
Nlnet Labs Net Dns=0.51_01
Nlnet Labs Net Dns=0.25
Nlnet Labs Net Dns=0.50
Nlnet Labs Net Dns=0.47_01
Nlnet Labs Net Dns=0.21
Nlnet Labs Net Dns=0.28
Nlnet Labs Net Dns=0.31
Nlnet Labs Net Dns=0.51_02
Nlnet Labs Net Dns=0.43
Nlnet Labs Net Dns=0.32
Nlnet Labs Net Dns=0.20
Nlnet Labs Net Dns=0.34
Nlnet Labs Net Dns=0.52
Nlnet Labs Net Dns=0.30
Nlnet Labs Net Dns=0.44_01
Nlnet Labs Net Dns=0.53_01
Nlnet Labs Net Dns=0.48_02
Nlnet Labs Net Dns=0.34_03
Nlnet Labs Net Dns=0.55
Nlnet Labs Net Dns=0.57
Nlnet Labs Net Dns=0.22
Nlnet Labs Net Dns=0.39_02
Nlnet Labs Net Dns=0.49_02
Nlnet Labs Net Dns=0.38_01
Nlnet Labs Net Dns=0.45
Nlnet Labs Net Dns=0.26
Nlnet Labs Net Dns=0.44_02
Nlnet Labs Net Dns=0.40_01
Nlnet Labs Net Dns=0.39_01
Nlnet Labs Net Dns=0.27
Nlnet Labs Net Dns=0.49_01
Nlnet Labs Net Dns=0.56
Nlnet Labs Net Dns=0.53_02
Nlnet Labs Net Dns=0.36
Nlnet Labs Net Dns=0.42_01
Nlnet Labs Net Dns=0.54
Nlnet Labs Net Dns=0.39
Nlnet Labs Net Dns=0.48
Nlnet Labs Net Dns=0.53
Net-dns Net\<0.60
Debian Debian Linux=3.1
Debian Debian Linux=4.0
Canonical Ubuntu Linux=6.06
Canonical Ubuntu Linux=6.10
Event History
Jun 26, 2007
CVE Published
06:30 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3409?
The severity of CVE-2007-3409 is classified as medium, as it can lead to a denial of service due to stack consumption.
2
How do I fix CVE-2007-3409?
To fix CVE-2007-3409, upgrade the Net::DNS Perl module to version 0.60 or later.
3
Which versions of Net::DNS are affected by CVE-2007-3409?
CVE-2007-3409 affects Net::DNS versions before 0.60, including versions like 0.48_03, 0.59, and earlier.
4
What type of attack does CVE-2007-3409 facilitate?
CVE-2007-3409 allows remote attackers to exploit a malformed DNS packet to cause a denial of service.
5
Is CVE-2007-3409 specific to any operating systems?
CVE-2007-3409 can affect systems running vulnerable versions of Net::DNS on any operating system that supports Perl.