2 matches found
Insecure Random Generator
github.com/miekg/dns uses an insecure random generation for transaction IDs. The default Id function uses an insecure math/rand function, resulting in predictable output and allowing an attacker to exploit the vulnerability to forge responses without being on path...
Denial Of Service (DoS)
github.com/miekg/dns is vulnerable to Denial Of Service DoS. A null pointer dereference in the setTA function in scanrr.go causes a denial of service condition when dns.ParseZone parsing error occurs, allowing an attacker to deny service to users...