| Package | Affected versions | Patched versions |
|---|---|---|
| c-ares | = 1.0= 1.1= 1.2= 1.2.1= 1.3= 1.3.1= 1.3.2 |
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free