The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Glibc | Gnu | 2.0 (including) | 2.0 (including) |
| Glibc | Gnu | 2.1 (including) | 2.1 (including) |
| Glibc | Gnu | 2.1.1 (including) | 2.1.1 (including) |
| Glibc | Gnu | 2.1.2 (including) | 2.1.2 (including) |
| Glibc | Gnu | 2.1.3 (including) | 2.1.3 (including) |
| Bind | Isc | 8.2 (including) | 8.2 (including) |
| Bind | Isc | 8.2.1 (including) | 8.2.1 (including) |
| Bind | Isc | 8.2.2 (including) | 8.2.2 (including) |