cvedb.io
CVE-2022-30295
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2022-05-06T05:15:07.213 · Last modified 2026-06-17T04:43:25.917

Summary

uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2.

Affected products

uclibc — uclibc

Does this affect you?

Add your gear to cvedb and we'll alert you only when uclibc ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.