CVE-2022-34295

CVE-2022-34295 affects totd, a DNS proxy nameserver by F.W. Dillema. The flaw stems from improper randomization of message IDs in versions prior to 1.5.3. The impact is exposure of how messages are matched/handled due to weak ID randomness, with the CVSS metrics indicating moderate severity (CVSS...

CVE-2022-34294

The CVE-2022-34294 entry concerns totd 1.5.3, a small DNS proxy nameserver. The issue is that upstream DNS queries use a fixed UDP source port, providing insufficient entropy and enabling DNS cache poisoning. Affected component: totd 1.5.3. Root cause: fixed UDP source port in upstream queries to...