Lucene search
Veracode Vulnerability DatabaseVERACODE:38528HistoryDec 20, 2022 - 2:06 a.m.
Information Disclosure
2022-12-2002:06:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
dns
information disclosure
vulnerability
password generation
request function
spoofing
software
0.002 Low
EPSS
Percentile
53.4%
DNS is vulnerable to information disclosure. The vulnerability exists due to the insecure random password generation in the Request function of Request.cs, allowing an attacker to guess the password and spoof the DNS responses.
Related
osv
osv
CVE-2021-4248
2022-12-18 11:15:09
DNS NuGet package uses insufficiently random values
2022-12-18 12:30:20
nvd
nvd
CVE-2021-4248
2022-12-18 11:15:09
cve
cve
CVE-2021-4248
2022-12-18 11:15:09
prion
prion
Design/Logic Flaw
2022-12-18 11:15:00
github
github
DNS NuGet package uses insufficiently random values
2022-12-18 12:30:20
cvelist
cvelist
CVE-2021-4248 kapetan dns Request.cs entropy
2022-12-18 00:00:00