CVEvulnerability
CVE-2008-3217
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
Affected configurations
• powerdns recursor (<= 3.1.5)
• powerdns recursor 3.0
• powerdns recursor 3.0.1
• powerdns recursor 3.1.1
• powerdns recursor 3.1.2
• powerdns recursor 3.1.3
• powerdns recursor 3.1.4
Related
Weakness · not in database (1)
References
- http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-6 doc.powerdns.com
- http://secunia.com/advisories/31311 secunia.com
- http://wiki.powerdns.com/cgi-bin/trac.fcgi/changeset/1179 Patch
- http://www.openwall.com/lists/oss-security/2008/07/09/10 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/07/10/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/07/16/12 www.openwall.com
- http://www.securityfocus.com/bid/30782 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43925 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01353.html www.redhat.com
- http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-6 doc.powerdns.com
- http://secunia.com/advisories/31311 secunia.com
- http://wiki.powerdns.com/cgi-bin/trac.fcgi/changeset/1179 Patch
- http://www.openwall.com/lists/oss-security/2008/07/09/10 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/07/10/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/07/16/12 www.openwall.com
- http://www.securityfocus.com/bid/30782 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43925 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01353.html www.redhat.com