The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.

Versions of Mozilla Firefox for Android earlier than 37.0 are affected by a flaw in 'android/res_init.c' within the Fennec name resolver that is due to insufficient entropy in the pseudo-random number generator (PRNG). This may allow a context-dependent attacker to conduct a DNS cache poisoning attack.

The Mozilla Project reports :

MFSA-2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6)

MFSA-2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin

MFSA-2015-32 Add-on lightweight theme installation approval bypassed through MITM attack

MFSA-2015-33 resource:// documents can load privileged pages

MFSA-2015-34 Out of bounds read in QCMS library

MFSA-2015-35 Cursor clickjacking with flash and images

MFSA-2015-36 Incorrect memory management for simple-type arrays in WebRTC

MFSA-2015-37 CORS requests should not follow 30x redirections after preflight

MFSA-2015-38 Memory corruption crashes in Off Main Thread Compositing

MFSA-2015-39 Use-after-free due to type confusion flaws

MFSA-2015-40 Same-origin bypass through anchor navigation

MFSA-2015-41 PRNG weakness allows for DNS poisoning on Android

MFSA-2015-42 Windows can retain access to privileged content on navigation to unprivileged pages

The Google Android operating system prior to 4.1.1 is vulnerable to a DNS cache poisoning vulnerability that can be triggered when a stub resolver fails to acquire a port with its own DNS port implementation and resorts to the res_randomid() function of res_init.c to obtain it.  The predictability of the port may make it easier for a remote attacker to poison the DNS cache of a target user.

ID	Name	Product	Family	Severity
8746	Mozilla Firefox for Android < 37.0 DNS Cache Poisoning	Nessus Network Monitor	Mobile Devices	medium
82482	FreeBSD : mozilla -- multiple vulnerabilities (d0c97697-df2c-4b8b-bff2-cec24dc35af8)	Nessus	FreeBSD Local Security Checks	high
8326	Google Android Operating System < 4.1.1 DNS Cache Poisoning Vulnerability	Nessus Network Monitor	Mobile Devices	medium

Detections

Analytics

CVE-2012-2808

critical

Tenable Plugins

medium

high

medium