| Package | Affected versions | Patched versions |
|---|---|---|
| c-ares | = 1.0= 1.1= 1.2= 1.2.1= 1.3= 1.3.1= 1.3.2 |
The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence (Unix rand), which makes it easier for remote attackers to spoof DNS responses by guessing certain values.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free