2 matches found
CVE-2026-28810: Generation of Predictable Numbers or Identifiers
Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolver inetres uses a sequential, process-global 16-bit transaction ID for UDP queries and does not implement source port randomization...
6.3CVSS5.9AI score0.00406EPSS
SaveExploits0References8
CVE-1999-1379
CVE-1999-1379 concerns DNS reflection via UDP queries where an attacker spoofs the source address to use DNS name servers as traffic amplifiers, causing amplified traffic toward the victim. The description in the connected records confirms that open resolvers can be abused to generate more traffi...
5CVSS7AI score0.02587EPSS
SaveExploits0References5Affected Software1
20