6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.2%
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | pdns-recursor | < 3.1.7-1 | pdns-recursor_3.1.7-1_all.deb |
Debian | 11 | all | pdns-recursor | < 3.1.7-1 | pdns-recursor_3.1.7-1_all.deb |
Debian | 10 | all | pdns-recursor | < 3.1.7-1 | pdns-recursor_3.1.7-1_all.deb |
Debian | 999 | all | pdns-recursor | < 3.1.7-1 | pdns-recursor_3.1.7-1_all.deb |
Debian | 13 | all | pdns-recursor | < 3.1.7-1 | pdns-recursor_3.1.7-1_all.deb |