| Package | Affected versions | Patched versions |
|---|---|---|
| net dns | = 0.14= 0.20= 0.21= 0.22= 0.23= 0.24= 0.25= 0.26= 0.27= 0.28= 0.29= 0.30= 0.31= 0.32= 0.33= 0.34= 0.34_02= 0.34_03= 0.35= 0.36= 0.37= 0.38= 0.38_01= 0.38_02= 0.39= 0.39_01= 0.39_02= 0.40= 0.40_01= 0.41= 0.42= 0.42_01= 0.42_02= 0.43= 0.44= 0.44_01= 0.44_02= 0.45= 0.45_01= 0.46= 0.47= 0.47_01= 0.48= 0.48_01= 0.48_02= 0.48_03= 0.49= 0.49_01= 0.49_02= 0.49_03= 0.50= 0.51= 0.51_01= 0.51_02= 0.52= 0.53= 0.53_01= 0.53_02= 0.54= 0.55= 0.56= 0.57= 0.58= 0.59 |
Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free