CVE-2023-41045 Insecure source port usage for DNS queries in Graylog

Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This goes against recommended practice sin...

CVE-2023-41045

CVE-2023-41045 affects Graylog: insecure, single-source-port usage for DNS queries. The issue stems from binding a single outgoing DNS socket to a random port that is never rotated, increasing susceptibility to forged DNS responses and cache poisoning. Impact is described as potential poisoning r...