Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mrq8-v5mr-5qwj

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.

The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.

EPSS

Процентиль: 63%
0.00455
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
почти 11 лет назад

The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.

nvd
почти 11 лет назад

The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.

debian
почти 11 лет назад

The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fe ...

EPSS

Процентиль: 63%
0.00455
Низкий

Дефекты

CWE-200