1 matches found
GHSA-G96C-X7RH-99R3 Graylog vulnerable to insecure source port usage for DNS queries
Summary Graylog utilises only one single source port for DNS queries. Details Graylog seems to bind a single socket for outgoing DNS queries. That socket is bound to a random port number which is not changed again. This goes against recommended practice since 2008, when Dan Kaminsky discovered ho...