{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"uclibc","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NGPFWQVP15FZ248WBNBY6F","modified_at":"2026-10-15T08:03:04.426306042Z","published_at":"2022-05-06T05:15:07.213Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-30295","https://security-tracker.debian.org/tracker/CVE-2022-30295"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-30295","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-30295"}],"summary":"uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2."}