Lucene search

K
osvGoogleOSV:GO-2020-0008
HistoryApr 14, 2021 - 8:04 p.m.

Insecure generation of random numbers in github.com/miekg/dns

2021-04-1420:04:52
Google
osv.dev
14
github repository
dns message
response spoofing
security vulnerability

EPSS

0.002

Percentile

56.7%

DNS message transaction IDs are generated using math/rand which makes them relatively predictable. This reduces the complexity of response spoofing attacks against DNS clients.