Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/miekg/dns

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
pkg.go.dev

Advisories 3

  • The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because…

    Affected: fixed in 1.1.25; fixed in 1.1.25-0.20191211073109-8ebf2e419df7.

  • An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go.

    Affected: fixed in 1.0.10.

  • A denial of service flaw was found in miekg-dns before 1.0.4.

    Affected: fixed in 1.0.4-0.20180125103619-43913f2f4fbd; fixed in 1.0.4.