Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Daniel Stenberg Subscribe
Filtered by product C-ares
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3152 1 Daniel Stenberg 1 C-ares 2017-07-28 7.5 HIGH N/A
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.
CVE-2007-3153 1 Daniel Stenberg 1 C-ares 2017-07-28 5.0 MEDIUM N/A
The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence (Unix rand), which makes it easier for remote attackers to spoof DNS responses by guessing certain values.