CVE-2022-34294: Totd Project Totd

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.

Affected products

Published 2022-08-15. Last modified 2026-06-17.