CyberSecBulletin

Totd Project vulnerabilities

We track 1 vulnerability in Totd Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Totd Project vulnerabilities

  • 9.8 Critical severity

    Totd: Insufficient Entropy

    CVE-2022-34294Totd ProjectEPSS 1.9%

    totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.