Read the docs
TI-2007-03272 Aliases CVE-2007-3377GHSA-2mqm-w9vq-9c5r

Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs…

Priority LOW 24Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.

Why it matters now

EPSS 0.02049 81st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 64

CPEVersionsRoleVendor
cpe:2.3:a:nlnet_labs:net_dns:0.14:*:*:*:*:*:*:*0.14VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.20:*:*:*:*:*:*:*0.20VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.21:*:*:*:*:*:*:*0.21VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.22:*:*:*:*:*:*:*0.22VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.23:*:*:*:*:*:*:*0.23VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.24:*:*:*:*:*:*:*0.24VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.25:*:*:*:*:*:*:*0.25VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.26:*:*:*:*:*:*:*0.26VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.27:*:*:*:*:*:*:*0.27VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.28:*:*:*:*:*:*:*0.28VulnerableNLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.14:*:*:*:*:*:*:* Versions 0.14 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.20:*:*:*:*:*:*:* Versions 0.20 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.21:*:*:*:*:*:*:* Versions 0.21 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.22:*:*:*:*:*:*:* Versions 0.22 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.23:*:*:*:*:*:*:* Versions 0.23 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.24:*:*:*:*:*:*:* Versions 0.24 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.25:*:*:*:*:*:*:* Versions 0.25 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.26:*:*:*:*:*:*:* Versions 0.26 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.27:*:*:*:*:*:*:* Versions 0.27 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.28:*:*:*:*:*:*:* Versions 0.28 Vulnerable ·NLnet Labs
Show 54 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:nlnet_labs:net_dns:0.29:*:*:*:*:*:*:*0.29VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.30:*:*:*:*:*:*:*0.30VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.31:*:*:*:*:*:*:*0.31VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.32:*:*:*:*:*:*:*0.32VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.33:*:*:*:*:*:*:*0.33VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.34:*:*:*:*:*:*:*0.34VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.34_02:*:*:*:*:*:*:*0.34_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.34_03:*:*:*:*:*:*:*0.34_03VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.35:*:*:*:*:*:*:*0.35VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.36:*:*:*:*:*:*:*0.36VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.37:*:*:*:*:*:*:*0.37VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.38:*:*:*:*:*:*:*0.38VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.38_01:*:*:*:*:*:*:*0.38_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.38_02:*:*:*:*:*:*:*0.38_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.39:*:*:*:*:*:*:*0.39VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.39_01:*:*:*:*:*:*:*0.39_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.39_02:*:*:*:*:*:*:*0.39_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.40:*:*:*:*:*:*:*0.40VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.40_01:*:*:*:*:*:*:*0.40_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.41:*:*:*:*:*:*:*0.41VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.42:*:*:*:*:*:*:*0.42VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.42_01:*:*:*:*:*:*:*0.42_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.42_02:*:*:*:*:*:*:*0.42_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.43:*:*:*:*:*:*:*0.43VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.44:*:*:*:*:*:*:*0.44VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.44_01:*:*:*:*:*:*:*0.44_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.44_02:*:*:*:*:*:*:*0.44_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.45:*:*:*:*:*:*:*0.45VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.45_01:*:*:*:*:*:*:*0.45_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.46:*:*:*:*:*:*:*0.46VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.47:*:*:*:*:*:*:*0.47VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.47_01:*:*:*:*:*:*:*0.47_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.48:*:*:*:*:*:*:*0.48VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.48_01:*:*:*:*:*:*:*0.48_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.48_02:*:*:*:*:*:*:*0.48_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.48_03:*:*:*:*:*:*:*0.48_03VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.49:*:*:*:*:*:*:*0.49VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.49_01:*:*:*:*:*:*:*0.49_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.49_02:*:*:*:*:*:*:*0.49_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.49_03:*:*:*:*:*:*:*0.49_03VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.50:*:*:*:*:*:*:*0.50VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.51:*:*:*:*:*:*:*0.51VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.51_01:*:*:*:*:*:*:*0.51_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.51_02:*:*:*:*:*:*:*0.51_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.52:*:*:*:*:*:*:*0.52VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.53:*:*:*:*:*:*:*0.53VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.53_01:*:*:*:*:*:*:*0.53_01VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.53_02:*:*:*:*:*:*:*0.53_02VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.54:*:*:*:*:*:*:*0.54VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.55:*:*:*:*:*:*:*0.55VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.56:*:*:*:*:*:*:*0.56VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.57:*:*:*:*:*:*:*0.57VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.58:*:*:*:*:*:*:*0.58VulnerableNLnet Labs
cpe:2.3:a:nlnet_labs:net_dns:0.59:*:*:*:*:*:*:*0.59VulnerableNLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.29:*:*:*:*:*:*:* Versions 0.29 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.30:*:*:*:*:*:*:* Versions 0.30 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.31:*:*:*:*:*:*:* Versions 0.31 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.32:*:*:*:*:*:*:* Versions 0.32 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.33:*:*:*:*:*:*:* Versions 0.33 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.34:*:*:*:*:*:*:* Versions 0.34 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.34_02:*:*:*:*:*:*:* Versions 0.34_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.34_03:*:*:*:*:*:*:* Versions 0.34_03 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.35:*:*:*:*:*:*:* Versions 0.35 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.36:*:*:*:*:*:*:* Versions 0.36 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.37:*:*:*:*:*:*:* Versions 0.37 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.38:*:*:*:*:*:*:* Versions 0.38 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.38_01:*:*:*:*:*:*:* Versions 0.38_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.38_02:*:*:*:*:*:*:* Versions 0.38_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.39:*:*:*:*:*:*:* Versions 0.39 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.39_01:*:*:*:*:*:*:* Versions 0.39_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.39_02:*:*:*:*:*:*:* Versions 0.39_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.40:*:*:*:*:*:*:* Versions 0.40 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.40_01:*:*:*:*:*:*:* Versions 0.40_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.41:*:*:*:*:*:*:* Versions 0.41 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.42:*:*:*:*:*:*:* Versions 0.42 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.42_01:*:*:*:*:*:*:* Versions 0.42_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.42_02:*:*:*:*:*:*:* Versions 0.42_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.43:*:*:*:*:*:*:* Versions 0.43 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.44:*:*:*:*:*:*:* Versions 0.44 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.44_01:*:*:*:*:*:*:* Versions 0.44_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.44_02:*:*:*:*:*:*:* Versions 0.44_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.45:*:*:*:*:*:*:* Versions 0.45 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.45_01:*:*:*:*:*:*:* Versions 0.45_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.46:*:*:*:*:*:*:* Versions 0.46 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.47:*:*:*:*:*:*:* Versions 0.47 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.47_01:*:*:*:*:*:*:* Versions 0.47_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.48:*:*:*:*:*:*:* Versions 0.48 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.48_01:*:*:*:*:*:*:* Versions 0.48_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.48_02:*:*:*:*:*:*:* Versions 0.48_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.48_03:*:*:*:*:*:*:* Versions 0.48_03 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.49:*:*:*:*:*:*:* Versions 0.49 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.49_01:*:*:*:*:*:*:* Versions 0.49_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.49_02:*:*:*:*:*:*:* Versions 0.49_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.49_03:*:*:*:*:*:*:* Versions 0.49_03 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.50:*:*:*:*:*:*:* Versions 0.50 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.51:*:*:*:*:*:*:* Versions 0.51 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.51_01:*:*:*:*:*:*:* Versions 0.51_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.51_02:*:*:*:*:*:*:* Versions 0.51_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.52:*:*:*:*:*:*:* Versions 0.52 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.53:*:*:*:*:*:*:* Versions 0.53 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.53_01:*:*:*:*:*:*:* Versions 0.53_01 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.53_02:*:*:*:*:*:*:* Versions 0.53_02 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.54:*:*:*:*:*:*:* Versions 0.54 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.55:*:*:*:*:*:*:* Versions 0.55 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.56:*:*:*:*:*:*:* Versions 0.56 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.57:*:*:*:*:*:*:* Versions 0.57 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.58:*:*:*:*:*:*:* Versions 0.58 Vulnerable ·NLnet Labs
  • cpe:2.3:a:nlnet_labs:net_dns:0.59:*:*:*:*:*:*:* Versions 0.59 Vulnerable ·NLnet Labs

Remediation

Red Hat 2 advisories

  • RHSA-2007:0674 Released 2007-07-12 · Red Hat rating Moderate
    perl-Net-DNS security update
    • Red Hat Desktop version 3 perl-Net-DNS-0.31-4.el3
    • Red Hat Enterprise Linux (v. 5 server) perl-Net-DNS-0.59-3.el5, perl-Net-DNS-0.59-3.el5.i386, perl-Net-DNS-0.59-3.el5.ia64 +1
    • Red Hat Enterprise Linux AS version 3 perl-Net-DNS-0.31-4.el3
    • Red Hat Enterprise Linux Desktop (v. 5 client) perl-Net-DNS-0.59-3.el5, perl-Net-DNS-0.59-3.el5.i386
    • Red Hat Enterprise Linux ES version 3 perl-Net-DNS-0.31-4.el3
    • Red Hat Enterprise Linux WS version 3 perl-Net-DNS-0.31-4.el3
  • RHSA-2007:0675 Released 2007-07-12 · Red Hat rating Moderate
    perl-Net-DNS security update
    • Red Hat Enterprise Linux AS version 4 perl-Net-DNS-0.48-2.el4, perl-Net-DNS-0.48-2.el4.i386, perl-Net-DNS-0.48-2.el4.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 perl-Net-DNS-0.48-2.el4, perl-Net-DNS-0.48-2.el4.i386
    • Red Hat Enterprise Linux ES version 4 perl-Net-DNS-0.48-2.el4, perl-Net-DNS-0.48-2.el4.i386, perl-Net-DNS-0.48-2.el4.ia64
    • Red Hat Enterprise Linux WS version 4 perl-Net-DNS-0.48-2.el4, perl-Net-DNS-0.48-2.el4.i386, perl-Net-DNS-0.48-2.el4.ia64

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2007:0674
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2007:0674
Red Hat Enterprise Linux AS version 3Fixed RHSA-2007:0674
Red Hat Enterprise Linux AS version 4Fixed RHSA-2007:0675
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2007:0674
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2007:0675
Red Hat Enterprise Linux ES version 3Fixed RHSA-2007:0674
Red Hat Enterprise Linux ES version 4Fixed RHSA-2007:0675
Red Hat Enterprise Linux WS version 3Fixed RHSA-2007:0674
Red Hat Enterprise Linux WS version 4Fixed RHSA-2007:0675

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-3377
  2. 2026-10-03 Alias added: GHSA-2mqm-w9vq-9c5r

References

Exploit 1

Patch 1

Advisory 8

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences