CVE-2012-2808

CVE-2012-2808 describes a weakness in the DNS resolver's pseudo-random number generator (PRNG) within Google Bionic, affecting Android versions prior to 4.1.1. This flaw allows remote attackers to more easily spoof DNS responses by predicting query IDs and UDP source ports due to the PRNG's reliance on predictable time and PID information. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity, requiring no authentication, and potentially leading to information disclosure (DNS poisoning). While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.