blob: 2c9c0e054a28820e8cbe72a0d8b1079128a75c67 [file] [log] [blame]
module = "github.com/miekg/dns"
description = """
DNS message transaction IDs are generated using [`math/rand`] which
makes them relatively predictable. This reduces the complexity
of response spoofing attacks against DNS clients.
"""
cve = "CVE-2019-19794"
symbols = ["id"]
[[versions]]
fixed = "v1.1.25-0.20191211073109-8ebf2e419df7"
[links]
pr = "https://github.com/miekg/dns/pull/1044"
commit = "https://github.com/miekg/dns/commit/8ebf2e419df7857ac8919baa05248789a8ffbf33"
context = [
"https://github.com/miekg/dns/issues/1037",
"https://github.com/miekg/dns/issues/1043"
]