The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Glibc | Gnu | 2.0 (including) | 2.0 (including) |
Glibc | Gnu | 2.1 (including) | 2.1 (including) |
Glibc | Gnu | 2.1.1 (including) | 2.1.1 (including) |
Glibc | Gnu | 2.1.2 (including) | 2.1.2 (including) |
Glibc | Gnu | 2.1.3 (including) | 2.1.3 (including) |
Bind | Isc | 8.2 (including) | 8.2 (including) |
Bind | Isc | 8.2.1 (including) | 8.2.1 (including) |
Bind | Isc | 8.2.2 (including) | 8.2.2 (including) |