Lucene search
HistoryMar 24, 2007 - 12:19 a.m.
CVE-2007-1653
cve-2007-1653
glowworm fw
denial of service
kernel panic
truedns
dns parsing
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.6%
GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic) via certain DNS responses that trigger infinite recursion in TrueDNS packet parsing, as originally observed with certain login.yahoo.com responses.
Affected configurations
Node
glowwormglowwormRange≤1.5.3b3
| CPE | Name | Operator | Version |
|---|---|---|---|
| glowworm:glowworm | glowworm | le | 1.5.3b3 |
Related
prion
prion
Code injection
2007-03-24 00:19:00
cvelist
cvelist
CVE-2007-1653
2007-03-24 00:00:00
nvd
nvd
CVE-2007-1653
2007-03-24 00:19:00
securityvulns
securityvulns
GlowWorm FW DoS
2007-03-25 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.6%
Related for CVE-2007-1653