CVE-2012-2808
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses...
CVE-2012-2808 is a medium vulnerability (CVSS 5.0) in Google Bionic, published April 1, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.27%, the 69th percentile. Fixed in MozillaFirefox 50.1.0-1.1.
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
Exploit likelihood
What each source reports
NVD Score used
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
- Record
CVE-2012-2808- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
- Record
CVE-2012-2808- Updated
- 2026-11-02
EUVDEUVD-2012-2788 No score
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
- Record
EUVD-2012-2788- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wr4x-7qhj-2g7g No score
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses...
The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
- Record
GHSA-wr4x-7qhj-2g7g- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxopenSUSE:Tumbleweed |
before 50.1.0-1.1 | 50.1.0-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
mozilla.org/security/announce/2015/mfsa2015-41.html
blog.watchfire.com/files/androiddnsweakprng.pdf
nvd.nist.gov/vuln/detail/CVE-2012-2808
github.com/advisories/GHSA-wr4x-7qhj-2g7g
suse.com/security/cve/CVE-2008-5913
Show 194 moreShow less
Left out here: 703 references. The JSON record has them.