blob: 2af3801fb0f4f1648e5e5926d9f07b8f76fdc9a4 [file] [log] [blame]
module = "github.com/miekg/dns"
description = """
DNS message transaction IDs are generated using [`math/rand`] which
makes them relatively predictable. This reduces the complexity
of response spoofing attacks against DNS clients.
"""
cve = "CVE-2019-19794"
symbols = ["id"]
published = "2021-04-14T12:00:00Z"
[[versions]]
fixed = "v1.1.25-0.20191211073109-8ebf2e419df7"
[links]
pr = "https://github.com/miekg/dns/pull/1044"
commit = "https://github.com/miekg/dns/commit/8ebf2e419df7857ac8919baa05248789a8ffbf33"
context = [
"https://github.com/miekg/dns/issues/1037",
"https://github.com/miekg/dns/issues/1043"
]