DNS message transaction IDs are generated using math/rand which makes them relatively predictable. This reduces the complexity of response spoofing attacks against DNS clients.
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2020-0008" }