Debian Libnet-Dns-Perl vulnerabilities

CVE-2008-1447 [MEDIUM] CVE-2008-1447: adns - The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, ... The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to i

CVE-2007-6341 [MEDIUM] CVE-2007-6341: libnet-dns-perl - Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssa... Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response. Scope: local bookworm: resolved (fixed in 0.63-1) bullseye: resolved (fixed in 0.63-1) forky: resolved (fixed in 0.63-1) sid: resolved (fixed in 0.63-1) trixie: resol

CVE-2007-3409 [HIGH] CVE-2007-3409: libnet-dns-perl - Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial o... Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop. Scope: local bookworm: resolved (fixed in 0.60-1) bullseye: resolved (fixed in 0.60-1) forky: resolved (fixed in 0.60-1) sid: resolved (fixed in 0.60

CVE-2007-3377 [MEDIUM] CVE-2007-3377: libnet-dns-perl - Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequ... Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin. Scope: local bookworm: resolved (fixed in 0.60-1) bullseye: