1 matches found
AZL-43702 CVE-2023-31147 affecting package python-pycares 3.1.1-3
c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand so will generate predictable output. Input from the random number generator i...
6.5CVSS6.7AI score0.00905EPSS
SaveExploits0References1
20