CVE-2012-2808

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-04-01 · updated 2026-06-16

Description

The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.

Affected products

Google Bionic: through 4.1.0

References

http://blog.watchfire.com/files/androiddnsweakprng.pdf
http://www.mozilla.org/security/announce/2015/mfsa2015-41.html
http://blog.watchfire.com/files/androiddnsweakprng.pdf
http://www.mozilla.org/security/announce/2015/mfsa2015-41.html

Get alerted when CVE-2012-2808 or the next vulnerability affects your stack