CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/06/23 5:15 p.m.•7 views

CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs...

6.5CVSS0.00365EPSS

Exploits1References4

Prion•added 2022/06/23 5:15 p.m.•12 views

Code injection

totd before 1.5.3 does not properly randomize mesg IDs...

4.3CVSS6.5AI score0.00365EPSS

Exploits1References4Affected Software1

CVE•added 2022/06/22 2:46 p.m.•81 views

CVE-2022-34295

CVE-2022-34295 affects totd, a DNS proxy nameserver by F.W. Dillema. The flaw stems from improper randomization of message IDs in versions prior to 1.5.3. The impact is exposure of how messages are matched/handled due to weak ID randomness, with the CVSS metrics indicating moderate severity (CVSS...

6.5CVSS6.5AI score0.00365EPSS

Exploits1References4Affected Software1