Beveiligingsadvies

CVE-2014-4883

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-11-28 02:00:00

Laatst bijgewerkt 2024-08-06 11:27:37

Toegewezen door certcc

CVSS-score geen score

Status PUBLISHED

Beschrijving

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets.

← Alle CVE's bekijken Bekijk op cve.org ↗