Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200708-06 Normal: Net::DNS DoS and Cache Threats

gentoo
Calendar Grey August 11, 2007
Scroller Gentoo
Uncover several security flaws within the Net::DNS library that compromise Gentoo distributions, making them susceptible to denial-of-service (DoS) and cache manipulation assaults.
Multiple vulnerabilities have been discovered in the Net::DNS Perl module, allowing for a Denial of Service and a cache poisoning attack.

Summary

Gentoo Linux Security Advisory GLSA 200708-06 https://security.gentoo.org/ Severity: Normal Title: Net::DNS: Multiple vulnerabilities Date: August 11, 2007 Bugs: #184029 ID: 200708-06

Synopsis ======= Multiple vulnerabilities have been discovered in the Net::DNS Perl module, allowing for a Denial of Service and a cache poisoning attack.
Background ========= Net::DNS is a Perl implementation of a DNS resolver.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-perl/Net-DNS < 0.60 >= 0.60
========== hjp discovered an error when handling DNS query IDs which make them partially predictable. Steffen Ullrich discovered an error in the dn_expand() function ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo DoS cache poisoning normal severity Perl module Net::DNS

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo DoS cache poisoning normal severity Perl module Net::DNS

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround