CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS,...
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
Exploit likelihood
What each source reports
NVD Score used
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
- Record
CVE-2007-6341- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
- Record
CVE-2007-6341- Updated
- 2026-11-02
EUVDEUVD-2007-6308 No score
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
- Record
EUVD-2007-6308- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-84q5-9px8-9m43 No score
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS,...
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
- Record
GHSA-84q5-9px8-9m43- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
- Record
CVE-2007-6341- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6341 No score
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
- Record
DEBIAN-CVE-2007-6341- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libnet-dns-perlDebian:12 |
before 0.63-1 | 0.63-1 |
libnet-dns-perlDebian:13 |
before 0.63-1 | 0.63-1 |
libnet-dns-perlDebian:14 |
before 0.63-1 | 0.63-1 |
libnet-dns-perlDebian:3.1 From an advisory covering 3 CVEs |
before 0.48-1sarge1, plus listed versions 0.48-1 |
0.48-1sarge1 |
libnet-dns-perlDebian:4.0 From an advisory covering 3 CVEs |
before 0.59-1etch1, plus listed versions 0.59-1 |
0.59-1etch1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Perl Net::DNS 0.48/0.59/0.60 - DNS Response Remote Denial of Service | 2007-12-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6341 is a medium vulnerability (CVSS 5.0) in Net Dns Dns, published December 20, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.55%, the 95th percentile. Fixed in libnet-dns-perl 0.63-1.
References
secunia.com/advisories/29354
securitytracker.com/id?1019104
search.cpan.org/src/OLAF/Net-DNS-0.63/Changes
debian.org/security/2008/dsa-1515
rt.cpan.org/Public/Bug/Display.html?id=30316
Show 9 moreShow less
securiteam.com/unixfocus/6I00E0UKKQ.html
usn.ubuntu.com/594-1
mandriva.com/security/advisories?name=MDVSA-2008:073
securityfocus.com/bid/26902
nvd.nist.gov/vuln/detail/CVE-2007-6341
github.com/advisories/GHSA-84q5-9px8-9m43
security-tracker.debian.org/tracker/CVE-2007-6341