CVE-2007-6341

Publication date 20 December 2007

Last updated 24 July 2024

Ubuntu priority

Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libnet-dns-perl	7.10 gutsy	Fixed 0.60-1ubuntu0.1
	7.04 feisty	Fixed 0.59-1ubuntu0.2
	6.10 edgy	Fixed 0.57-1ubuntu1.1
	6.06 LTS dapper	Fixed 0.53-2ubuntu1.1

How can I get the fixes?
What do statuses mean?

Notes

jdstrand

securiteam.com has reproducer should be fixed in 0.63-- check here http://www.net-dns.org/docs/Changes.html

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-594-1
libnet-dns-perl vulnerability
26 March 2008

Other references

http://www.securiteam.com/unixfocus/6I00E0UKKQ.html
https://www.cve.org/CVERecord?id=CVE-2007-6341