CVE-2007-1653: Glowworm

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic) via certain DNS responses that trigger infinite recursion in TrueDNS packet parsing, as originally observed with certain login.yahoo.com responses.

Affected products

• Glowworm Glowworm: up to and including 1.5.3b3

Published 2007-03-24. Last modified 2026-06-16.