Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-3409
HistoryJun 26, 2007 - 6:30 p.m.

CVE-2007-3409

2007-06-2618:30:00
CWE-674
[email protected]
web.nvd.nist.gov
31
net::dns
perl module
cve-2007-3409
denial of service
dns packet
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.155 Low

EPSS

Percentile

95.9%

JSON

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.

References

Related

debiancve 1
prion 1
ubuntucve 1
nessus 12
openvas 15
oraclelinux 1
securityvulns 2
ubuntu 1
centos 1
freebsd 1
redhat 1
gentoo 1
debian 1
osv 1
debiancve
debiancve
CVE-2007-3409
2007-06-26 18:30:00
prion
prion
Code injection
2007-06-26 18:30:00
ubuntucve
ubuntucve
CVE-2007-3409
2007-06-26 00:00:00
nessus
nessus
GLSA-200708-06 : Net::DNS: Multiple vulnerabilities
2007-08-13 00:00:00
openSUSE 10 Security Update : perl-Net-DNS (perl-Net-DNS-3961)
2007-10-17 00:00:00
Ubuntu 6.06 LTS / 6.10 : libnet-dns-perl vulnerabilities (USN-483-1)
2007-11-10 00:00:00
openvas
openvas
SLES10: Security update for perl-Net-DNS
2009-10-13 00:00:00
Ubuntu: Security Advisory (USN-483-1)
2009-03-23 00:00:00
Gentoo Security Advisory GLSA 200708-06 (net-dns)
2008-09-24 00:00:00
oraclelinux
oraclelinux
Moderate: perl-Net-DNS security update
2007-07-12 00:00:00
securityvulns
securityvulns
[Full-disclosure] [ MDKSA-2007:146 ] - Updated perl-Net-DNS packages fix multiple vulnerabilities
2007-07-13 00:00:00
Perl Net::DNS package multiple security vulnerabilities
2007-12-17 00:00:00
ubuntu
ubuntu
libnet-dns-perl vulnerabilities
2007-07-13 00:00:00
centos
centos
perl security update
2007-07-12 10:57:15
freebsd
freebsd
p5-Net-DNS -- multiple Vulnerabilities
2007-06-27 00:00:00
redhat
redhat
(RHSA-2007:0674) Moderate: perl-Net-DNS security update
2007-07-12 00:00:00
gentoo
gentoo
Net::DNS: Multiple vulnerabilities
2007-08-11 00:00:00
debian
debian
[SECURITY] [DSA 1515-1] New libnet-dns-perl packages fix several vulnerabilities
2008-03-11 22:17:46
osv
osv
libnet-dns-perl - several vulnerabilities
2008-03-11 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.155 Low

EPSS

Percentile

95.9%

JSON
Related for CVE-2007-3409
debiancve1prion1ubuntucve1nessus12openvas15oraclelinux1securityvulns2ubuntu1centos1freebsd1redhat1gentoo1debian1osv1