7.5
CVE-2007-3152
- EPSS 1.4%
- Veröffentlicht 11.06.2007 22:30:00
- Zuletzt bearbeitet 16.06.2026 22:41:10
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginc-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Daniel Stenberg ≫ C-ares Version1.0
Daniel Stenberg ≫ C-ares Version1.1
Daniel Stenberg ≫ C-ares Version1.2
Daniel Stenberg ≫ C-ares Version1.2.1
Daniel Stenberg ≫ C-ares Version1.3
Daniel Stenberg ≫ C-ares Version1.3.1
Daniel Stenberg ≫ C-ares Version1.3.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.4% | 0.69 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://cool.haxx.se/cvs.cgi/curl/ares/CHANGES?rev=HEAD&content-type=text/vnd.viewcvs-markup
http://osvdb.org/37171
http://secunia.com/advisories/25579
http://www.securityfocus.com/bid/24386
https://exchange.xforce.ibmcloud.com/vulnerabilities/34979