5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.4%
The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec)
before 37.0 on Android does not properly generate random numbers for query
ID values and UDP source ports, which makes it easier for remote attackers
to spoof DNS responses by guessing these numbers, a related issue to
CVE-2012-2808.
Author | Note |
---|---|
chrisccoulson | Affects Android only |