Vulnerability in DNS Resolver of Android by Google
CVE-2012-2808

Currently unrated

Key Information:

Vendor

Google
Status
Bionic
Vendor
CVE Published:
1 April 2015

What is CVE-2012-2808?

The random number generation implementation in the DNS resolver of Android before version 4.1.1 is flawed. It relies on predictable values derived from time and process ID, which can potentially allow attackers to guess the query ID values and UDP source ports used in DNS transactions. This predictability may enable attackers to successfully spoof DNS responses, thereby compromising the integrity and reliability of DNS queries.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.mozilla.org/security/announce/2015/mfsa2015-41...
x_refsource_MISC
http://blog.watchfire.com/files/androiddnsweakprng.pdf
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.