Miekg-Dns Project Miekg-Dns vulnerabilities

1 known vulnerability affecting miekg-dns_project/miekg-dns.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-19794MEDIUMCVSS 5.9fixed in 1.1.252019-12-13

CVE-2019-19794 [MEDIUM] CWE-338 CVE-2019-19794: The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improper The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries.