{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"uclibc","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NGPFZGAV4WQ26RF6XT5C30","modified_at":"2026-10-15T08:03:04.426306042Z","published_at":"2022-05-06T05:15:07.213Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-30295","https://security-tracker.debian.org/tracker/CVE-2022-30295"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-30295#Debian:13/uclibc","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-30295"}],"summary":"uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2."}