4 matches found
CVE-2022-34295
totd before 1.5.3 does not properly randomize mesg IDs...
6.5CVSS0.01529EPSS
SaveExploits1References4
Code injection
totd before 1.5.3 does not properly randomize mesg IDs...
4.3CVSS6.5AI score0.01529EPSS
SaveExploits1References4Affected Software1
CVE-2022-34295
CVE-2022-34295 affects totd, a DNS proxy nameserver by F.W. Dillema. The flaw stems from improper randomization of message IDs in versions prior to 1.5.3. The impact is exposure of how messages are matched/handled due to weak ID randomness, with the CVSS metrics indicating moderate severity (CVSS...
6.5CVSS6.5AI score0.01529EPSS
SaveExploits1References4Affected Software1
20