Vulnerability in Glowworm

CVE-2007-1653

GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic) via certain DNS responses that trigger infinite recursion in TrueDNS packet parsing, as originally observed with certain login.yahoo.com responses.

EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.

Affected products

References