4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.111 Low
EPSS
Percentile
95.1%
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during
generation of DNS query ids when answering resolver questions or sending
NOTIFY messages to slave name servers, which makes it easier for remote
attackers to guess the next query id and perform DNS cache poisoning.