Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

c-ares lets attackers guess DNS transaction IDs

CVE-2007-3152 · published 19 years ago
Summary

The c-ares library creates DNS request IDs using a predictable random seed. This makes it possible for an outsider to guess the ID and fake DNS replies, potentially redirecting traffic. Upgrade to c-ares version 1.4.0 or later, or apply the vendor's patch, to use a truly random seed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
daniel_stenberg c-ares 1.0
1.1
1.2
1.2.1
1.3
1.3.1
1.3.2
cpe:2.3:a:daniel_stenberg:c-ares:1.0:*:*:*:*:*:*:*
Original advisory text
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Timeline
Published11 Jun 2007
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2007-3152 · NVD
Track software like this
Free during beta