CVE-2022-30295: Uclibc

Medium severity, CVSS 6.5. EPSS: 12.2% chance of exploitation in the next 30 days.

uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2.

Affected products

• Uclibc Uclibc: up to and including 0.9.33.2
• Uclibc-NG Project Uclibc-NG: up to and including 1.0.40

Published 2022-05-06. Last modified 2026-06-17.