Totd Security Vulnerabilities and Issues — Totd CVE List

Lucene search

Totd ProjectTotd

2 matches found

CVE•added 2022/06/23 5:15 p.m.•73 views

CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs.

6.5CVSS6.5AI score0.00365EPSS

CVE•added 2022/08/15 12:15 p.m.•54 views

CVE-2022-34294

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.

9.8CVSS9.4AI score0.00184EPSS