Debian/pdns-recursor: unknown

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to

Action: Upgrade pdns-recursor to 3.1.7-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1637
• https://security-tracker.debian.org/tracker/CVE-2008-1637

published 2008-04-02T17:44:00Z · modified 2026-10-23T17:47:37.894800966Z · JSON