CVE-2007-3152

Vendordaniel stenbergProductc-aresDiscoveredJun 11, 2007UpdatedApr 23, 2026

c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.

View graph Watch Export

CVSS v3.1

—

EPSS

1.40%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

1 relationships

c-ares

source

Timeline

disclosure → media coverage

Jun 11, 2007

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026