6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.2%
PowerDNS Recursor before 3.1.6 does not always use the strongest random
number generator for source port selection, which makes it easier for
remote attack vectors to conduct DNS cache poisoning. NOTE: this is
related to incomplete integration of security improvements associated with
addressing CVE-2008-1637.