blob: ffcf54b67e5b0e6d6544b977ed423199e9fb9c8a [file] [log] [blame]
module: github.com/miekg/dns
versions:
- fixed: v1.1.25-0.20191211073109-8ebf2e419df7
description: |
DNS message transaction IDs are generated using math/rand which
makes them relatively predictable. This reduces the complexity
of response spoofing attacks against DNS clients.
published: 2021-04-14T20:04:52Z
cves:
- CVE-2019-19794
symbols:
- id
derived_symbols:
- Msg.SetAxfr
- Msg.SetIxfr
- Msg.SetNotify
- Msg.SetQuestion
- Msg.SetUpdate
links:
pr: https://github.com/miekg/dns/pull/1044
commit: https://github.com/miekg/dns/commit/8ebf2e419df7857ac8919baa05248789a8ffbf33
context:
- https://github.com/miekg/dns/issues/1037
- https://github.com/miekg/dns/issues/1043