CVE-2015-0800 | BDVDB-2026-68720 Detail

Description#

The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1031996
http://www.mozilla.org/security/announce/2015/mfsa2015-41.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1110212

Exploit#

No public exploit known

History#

Version 12015-04-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.