Github.Com Miekg Dns vulnerabilities

CVE-2017-15133 [HIGH] CWE-400 Denial of Service in miekg-dns Denial of Service in miekg-dns A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.

CVE-2018-17419 [HIGH] CWE-400 miekg/dns parsing error leads to nil pointer dereference and DoS miekg/dns parsing error leads to nil pointer dereference and DoS An issue was discovered in `setTA` in `scan_rr.go` in the Miek Gieben DNS library before 1.0.10 for Go. A `dns.ParseZone()` parsing error causes a segmentation violation, leading to denial of service.

CVE-2019-19794 [MEDIUM] CWE-330 miekg/dns insecurely generates random numbers miekg/dns insecurely generates random numbers The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries.