Severity by source
Network vector with high complexity for race condition; no auth required; scope changes as cached poison affects all clients; integrity impact high, confidentiality low via misdirection.
Lifecycle Timeline
2DescriptionCVE.org
[DNS transaction ID is sequential -- enables response injection]
AnalysisAI
Sequential DNS transaction IDs in Ubuntu's DNS resolver implementation allow network-adjacent or on-path attackers to inject forged DNS responses by predicting transaction IDs. The vulnerability undermines the randomness that DNS relies on to authenticate responses, enabling cache poisoning attacks that redirect legitimate domain resolutions to attacker-controlled addresses. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be network-adjacent or on-path between the resolver and its upstream DNS server (enabling UDP spoofing), and requires the target resolver to be using sequential transaction IDs without sufficient additional entropy sources such as source port randomization. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | No CVSS vector, EPSS score, KEV status, or POC data was provided in the input, making a quantitative risk score impossible to confirm independently. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been independently confirmed at time of analysis - the input provides no fix version or advisory URL. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today