Red Hat Security AdvisoryRHSA-2007:0674
perl-Net-DNS security update
Released 2007-07-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 perl-Net-DNS-0.31-4.el3
- Red Hat Enterprise Linux (v. 5 server) perl-Net-DNS-0.59-3.el5, perl-Net-DNS-0.59-3.el5.i386, perl-Net-DNS-0.59-3.el5.ia64 +1
- Red Hat Enterprise Linux AS version 3 perl-Net-DNS-0.31-4.el3
- Red Hat Enterprise Linux Desktop (v. 5 client) perl-Net-DNS-0.59-3.el5, perl-Net-DNS-0.59-3.el5.i386
- Red Hat Enterprise Linux ES version 3 perl-Net-DNS-0.31-4.el3
- Red Hat Enterprise Linux WS version 3 perl-Net-DNS-0.31-4.el3
Fixes 2 records
Priority MEDIUM 45
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03489 · Published 2007-06-26 · Fixed CWE-674
Priority LOW 24
Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attack…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02049 · Published 2007-06-25 · Fixed
