Lwip Project
1 CVEs
vendor
Monthly
resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Information Disclosure
Lwip
Lwip Project
NVD
CVSS 2.0
4.3
EPSS
0.1%
EPSS 0%
CVSS 4.3
MEDIUM
PATCH
This Month
resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Information Disclosure
Lwip
Lwip Project
NVD