CVE-2020-25926

The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id

published August 18, 2021

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). The attack vector is: a specific DNS response packet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01262 · 69.4th percentile
Published
2021-08-18T18:35Z
EPSS history
Timeline
  • 18 AUG 18:35Z
    The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id
    cvelistv5