Test ID:	1.3.6.1.4.1.25623.1.0.108826
Category:	General
Title:	lwIP TCP/IP Stack DNS Resolver <= 1.4.1 Cache-Poisoning Attack Vulnerability
Summary:	The lwIP TCP/IP Stack DNS Resolver is vulnerable against a cache-poisoning attack.
Description:	Summary: The lwIP TCP/IP Stack DNS Resolver is vulnerable against a cache-poisoning attack. Vulnerability Insight: 'dns.c' in the DNS resolver in lwIP does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets. Affected Software/OS: lwIP TCP/IP Stack DNS Resolver 1.4.1 and earlier. Solution: Update to version 2.0.0 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4883 CERT/CC vulnerability note: VU#210620 http://www.kb.cert.org/vuls/id/210620
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.