CVE-2015-0800
published 2015-04-01CVE-2015-0800: The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID…
PriorityP423medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.67%
74.5th percentile
The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bionic | <= 4.1.0 | — | |
| mozilla | firefox | <= 36.0.4 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mrq8-v5mr-5qwj: The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37
ghsa_unreviewed·2022-05-17·CVSS 5.0
CVE-2015-0800 [MEDIUM] CWE-200 GHSA-mrq8-v5mr-5qwj: The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37
The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.
GHSA
GHSA-wr4x-7qhj-2g7g: The PRNG implementation in the DNS resolver in Bionic in Android before 4
ghsa_unreviewed·2022-05-17·CVSS 5.0
CVE-2012-2808 [MEDIUM] GHSA-wr4x-7qhj-2g7g: The PRNG implementation in the DNS resolver in Bionic in Android before 4
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.mozilla.org/security/announce/2015/mfsa2015-41.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.securitytracker.com/id/1031996https://bugzilla.mozilla.org/show_bug.cgi?id=1110212http://www.mozilla.org/security/announce/2015/mfsa2015-41.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.securitytracker.com/id/1031996https://bugzilla.mozilla.org/show_bug.cgi?id=1110212
2015-04-01
Published