CVE-2007-3409

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.

Link	Resource
http://rt.cpan.org/Public/Bug/Display.html?id=27285
http://www.net-dns.org/docs/Changes.html
http://www.gentoo.org/security/en/glsa/glsa-200708-06.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:146
http://www.redhat.com/support/errata/RHSA-2007-0674.html
ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc
http://www.novell.com/linux/security/advisories/2007_17_sr.html
http://www.trustix.org/errata/2007/0023/
http://www.ubuntu.com/usn/usn-483-1
http://www.securityfocus.com/bid/24669
http://www.securitytracker.com/id?1018376
http://secunia.com/advisories/25829
http://secunia.com/advisories/26014
http://secunia.com/advisories/26055
http://secunia.com/advisories/26012
http://secunia.com/advisories/26075
http://secunia.com/advisories/26211
http://secunia.com/advisories/26231
http://secunia.com/advisories/26417
http://secunia.com/advisories/26543
http://www.debian.org/security/2008/dsa-1515
http://secunia.com/advisories/29354
http://osvdb.org/37054
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10595
http://www.securityfocus.com/archive/1/473871/100/0/threaded

Configuration 1

cpe:2.3:a:nlnet_labs:net_dns:0.48_03:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.46:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.24:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.45_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.42_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.35:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.48_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.59:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.34_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.14:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.51:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.41:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.49:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.47:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.29:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.23:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.38:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.42:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.49_03:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.37:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.38_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.33:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.58:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.44:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.40:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.51_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.25:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.50:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.47_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.21:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.28:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.31:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.51_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.43:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.32:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.20:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.34:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.52:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.30:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.44_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.53_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.48_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.34_03:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.55:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.57:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.22:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.39_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.49_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.38_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.45:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.26:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.44_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.40_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.39_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.27:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.49_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.56:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.53_02:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.36:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.42_01:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.54:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.39:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.48:*:*:*:*:*:*:* cpe:2.3:a:nlnet_labs:net_dns:0.53:*:*:*:*:*:*:*

---

Published : 2007-06-26 06:30

Updated : 2018-10-16 04:49

---

NVD link : CVE-2007-3409

Mitre link : CVE-2007-3409

No products.

CWE-674

Uncontrolled Recursion