CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2022/08/15 12:15 p.m.•19 views

Design/Logic Flaw

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...

7.5CVSS9.4AI score0.01808EPSS

SaveExploits1References4Affected Software1

Cvelist•added 2022/08/15 11:53 a.m.•35 views

CVE-2022-34294

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...

9.7AI score0.01808EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2022/08/15 12:00 a.m.•4 views

CVE-2022-34294: Insufficient Entropy

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...

9.8CVSS8.3AI score0.01808EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by