CVE-2019-19794 @ Go-github.com/miekg/dns-v1.0.14

[dorohayon]

Vulnerable Package issue exists @ Go-github.com/miekg/dns-v1.0.14 in branch main

The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to response forgeries.

Namespace: dorohayon
Repository: cxone-advanced-lab
Repository Url: https://github.com/dorohayon/cxone-advanced-lab
CxAST-Project: dorohayon/cxone-advanced-lab
CxAST platform scan: 1f20cfdb-755f-4c85-8955-8edd4bc0421c
Branch: main
Application: cxone-advanced-lab
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-338

---

Additional Info
Attack vector: NETWORK
Attack complexity: HIGH
Confidentiality impact: NONE
Availability impact: NONE
Remediation Upgrade Recommendation: v1.0.14-0.20181012211526-4a9ca7e98d0f

---

References
Advisory
Advisory
Issue
Pull request
Commit