CVE-2007-3409: canonical ubuntu_linux Uncontrolled Recursion
CVSS: 7.5v3.1HighModified
AliasesDEBIAN-CVE-2007-3409
Published 26-06-2007Last modified 17-01-2025
Some data may be incomplete
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2007-3409 is a high (CVSS 7.5) Uncontrolled Recursion vulnerability in canonical ubuntu_linux. EPSS estimates a 3.49% chance of exploitation in the next 30 days, higher than 88.9% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
3.49%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 26-06-2007PublishedVulnerability first disclosed.
- 17-01-2025Last modifiedVulnerability information updated.
Description
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Medium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
3.49%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.49% on 19-09-2026
19-09-202619-10-2026
EPSS score3.49%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- libnet-dns-perl< 0.60-1
- debian_linuxEOL3.1 | 4.0
Canonical1 product
- ubuntu_linuxEOL6.06 | 6.10
2 vendors · 3 products
References
25 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10595VDB EntrySignatureX Refsource OVALBroken Link
www.debian.org/security/2008/dsa-1515Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
Show all 25 references
- www.mandriva.com/security/advisories?name=MDKSA-2007:146Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- www.gentoo.org/security/en/glsa/glsa-200708-06.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
- www.securityfocus.com/archive/1/473871/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry