Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in FNET through 4.6.4. The code that initializes the DNS client interface structure does not set sufficiently random transaction IDs (they are always set to 1 in _fnet_dns_poll in fnet_dns.c). This significantly simplifies DNS cache poisoning attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Contiki-NG 安全特征问题漏洞
Vulnerability Description
Contiki-NG是一套用于下一代IoT(物联网)设备的开源跨平台操作系统。 Contiki-NG 中存在安全特征问题漏洞,该漏洞源于用于初始化DNS客户端接口结构的函数未设置足够的随机事务ID(它们将始终设置为1),从而助长了DNS缓存中毒攻击。
CVSS Information
N/A
Vulnerability Type
N/A