reports/GO-2020-0008.yaml

module: github.com/miekg/dns
versions:
  - fixed: v1.1.25-0.20191211073109-8ebf2e419df7
description: |
  DNS message transaction IDs are generated using [`math/rand`] which
  makes them relatively predictable. This reduces the complexity
  of response spoofing attacks against DNS clients.
published: 2021-04-14T12:00:00Z
cve: CVE-2019-19794
symbols:
  - id
links:
  pr: https://github.com/miekg/dns/pull/1044
  commit: https://github.com/miekg/dns/commit/8ebf2e419df7857ac8919baa05248789a8ffbf33
  context:
    - https://github.com/miekg/dns/issues/1037
    - https://github.com/miekg/dns/issues/1043