CVE-2020-17470

creationtimestamp| type| source ---|---|--- 2020-12-12 02:36:15+00:00| seen| https://t.me/cibsecurity/20666 2020-12-12 02:39:13+00:00| seen| https://t.me/cibsecurity/20686 2020-12-12 03:25:39+00:00| seen| https://t.me/cibsecurity/20706 2020-12-12 04:07:28+00:00| seen| https://t.me/cibsecurity/207...

CVE-2020-17470

CVE-2020-17470 affects FNET (up to 4.6.4) where DNS client interface initialization leaves DNS transaction IDs non-random (always 1 in _fnet_dns_poll in fnet_dns.c), making DNS cache poisoning more feasible. The CVE is documented with a MEDIUM base score (~4.0–5.3 range in the CVSS vectors) and i...