CVE-2007-6341

Publication date 20 December 2007

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program “croak”) via a crafted DNS response.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
libnet-dns-perl 7.10 gutsy
Fixed 0.60-1ubuntu0.1
7.04 feisty
Fixed 0.59-1ubuntu0.2
6.10 edgy
Fixed 0.57-1ubuntu1.1
6.06 LTS dapper
Fixed 0.53-2ubuntu1.1

Notes

jdstrand

securiteam.com has reproducer should be fixed in 0.63-- check here http://www.net-dns.org/docs/Changes.html

References

Related Ubuntu Security Notices (USN)

    • USN-594-1
    • libnet-dns-perl vulnerability
    • 26 March 2008

Other references