Package · Debian

golang-github-miekg-dns

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.9

CVE-2019-19794

miekg/dns insecurely generates random numbers

The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries.

github.com/miekg/dns golang-github-miekg-dns golang-github-miekg-dns Debian Ubuntu Go

Dec 13, 2019
High 7.5

CVE-2017-15133

Denial of Service in miekg-dns

A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.

Miek Gieben miekg-dns github.com/miekg/dns golang-github-miekg-dns Debian Go

Jan 29, 2018