← Database

CVE-2007-3152

HIGH CVSS: 7.5 Published: 2007-06-11 Modified: 2026-06-16

Description

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.

Affected Platforms

Daniel Stenberg C-Ares

Weakness Type

NVD-CWE-Other

References