Msrc Cm1 Uclibc-Ng 1.0.41-1 On Cbl Mariner 1.0 vulnerabilities

1 known vulnerability affecting msrc/cm1_uclibc-ng_1.0.41-1_on_cbl_mariner_1.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-30295MEDIUMCVSS 6.52022-05-10

CVE-2022-30295 [MEDIUM] CWE-330 uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2. uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affect