PT-2007-1040 · Net+1 · Net::Dns+1
CVE-2007-3409
·
Publicado
2007-06-25
·
Atualizado
2025-01-17
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Net::DNS versions prior to 0.60
Description:
The issue allows remote attackers to cause a denial of service, specifically stack consumption, via a malformed compressed DNS packet with self-referencing pointers. This triggers an infinite loop, leading to disruption of protected information. The exploitation of this issue can be carried out remotely.
Recommendations:
For versions prior to 0.60, update to version 0.60 or later to resolve the issue. As a temporary workaround, consider restricting access to the DNS packet processing functionality until a patch is available.
Correção
DoS
Uncontrolled Recursion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Net::Dns
Red Hat