tocsin

Debian/adns: unknown

GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE

Action: Upgrade adns to 1.4-2 or later.

Affected

introducedfixedlast affected
01.4-2-

Fixed versions

1.4-2

Sources

published · modified · JSON