CVE-2007-3409

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.

🔗 References (50)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc
• secalert@redhathttp://osvdb.org/37054
• secalert@redhathttp://rt.cpan.org/Public/Bug/Display.html?id=27285
• secalert@redhathttp://secunia.com/advisories/25829
• secalert@redhathttp://secunia.com/advisories/26012
• secalert@redhathttp://secunia.com/advisories/26014
• secalert@redhathttp://secunia.com/advisories/26055
• secalert@redhathttp://secunia.com/advisories/26075
• secalert@redhathttp://secunia.com/advisories/26211
• secalert@redhathttp://secunia.com/advisories/26231
• secalert@redhathttp://secunia.com/advisories/26417
• secalert@redhathttp://secunia.com/advisories/26543
• secalert@redhathttp://secunia.com/advisories/29354
• secalert@redhathttp://www.debian.org/security/2008/dsa-1515
• secalert@redhathttp://www.gentoo.org/security/en/glsa/glsa-200708-06.xml