CoreDNS update for Miek Gieben DNS library



Published: 2020-01-19 | Updated: 2024-06-28
Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2019-19794
CWE-ID CWE-338
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		CoreDNS
Server applications / DNS servers

Vendor CoreDNS

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

EUVDB-ID: #VU93491

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-19794

CWE-ID: CWE-338 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Exploit availability: No

Description

The vulnerability allows a remote attacker to poison DNS cache.

The vulnerability exists due to usage of predictable random numbers for TXID. A remote attacker can forge DNS responses.


Mitigation

Install update from vendor's website.

Vulnerable software versions

CoreDNS: before 1.6.6

External links

http://github.com/coredns/coredns/issues/3519
http://github.com/coredns/coredns/issues/3547


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###