← Database

CVE-2022-34294

CRITICAL CVSS: 9.8 Published: 2022-08-15 Modified: 2026-06-17

Description

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.

Affected Platforms

Totd Project Totd

Weakness Type

CWE-331

References