CVE-2007-6341 Denial of service in n/a
Remote attackers can cause a denial of service in applications using Net::DNS by sending a crafted DNS response that triggers a program crash.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6341?
CVE-2007-6341 is a medium-severity denial of service vulnerability in n/a, published on 20 Dec 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
Weakness: CWE-119
Which versions are affected by CVE-2007-6341?
It affects 1 product.
Products include Net Dns Net Dns.
How do I fix CVE-2007-6341?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-6341 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-6341 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2007-6341, GHSA-84q5-9px8-9m43.