| module: github.com/miekg/dns |
| versions: |
| - fixed: v1.1.25-0.20191211073109-8ebf2e419df7 |
| description: | |
| DNS message transaction IDs are generated using [`math/rand`] which |
| makes them relatively predictable. This reduces the complexity |
| of response spoofing attacks against DNS clients. |
| published: 2021-04-14T12:00:00Z |
| cve: CVE-2019-19794 |
| symbols: |
| - id |
| links: |
| pr: https://github.com/miekg/dns/pull/1044 |
| commit: https://github.com/miekg/dns/commit/8ebf2e419df7857ac8919baa05248789a8ffbf33 |
| context: |
| - https://github.com/miekg/dns/issues/1037 |
| - https://github.com/miekg/dns/issues/1043 |