CVE-2008-3217 : PowerDNS Recursor before 3.1.6 does not always use the strongest random number g

PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.

Published 2008-07-18 16:41:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2008-3217

Powerdns » Recursor
Versions up to, including, (<=) 3.1.5
cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*
Matching versions
Powerdns » Recursor » Version: 3.0
cpe:2.3:a:powerdns:recursor:3.0:*:*:*:*:*:*:*
Matching versions
Powerdns » Recursor » Version: 3.0.1
cpe:2.3:a:powerdns:recursor:3.0.1:*:*:*:*:*:*:*
Matching versions
Powerdns » Recursor » Version: 3.1.2
cpe:2.3:a:powerdns:recursor:3.1.2:*:*:*:*:*:*:*
Matching versions
Powerdns » Recursor » Version: 3.1.1
cpe:2.3:a:powerdns:recursor:3.1.1:*:*:*:*:*:*:*
Matching versions
Powerdns » Recursor » Version: 3.1.3
cpe:2.3:a:powerdns:recursor:3.1.3:*:*:*:*:*:*:*
Matching versions
Powerdns » Recursor » Version: 3.1.4
cpe:2.3:a:powerdns:recursor:3.1.4:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2008-3217

Top countries where our scanners detected CVE-2008-3217

Top open port discovered on systems with this issue 53

IPs affected by CVE-2008-3217 4

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2008-3217!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2008-3217

EPSS FAQ

0.00%

Probability of exploitation activity in the next 30 days EPSS Score History

~ %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-3217

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2008-3217

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-3217

http://www.openwall.com/lists/oss-security/2008/07/09/10

oss-security - CVE request: PowerDNS recursor source port randomization
http://www.openwall.com/lists/oss-security/2008/07/16/12

oss-security - Re: CVE request: PowerDNS recursor source port randomization
http://www.openwall.com/lists/oss-security/2008/07/10/6

oss-security - Re: DNS vulnerability: other relevant software
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01353.html

[SECURITY] Fedora 9 Update: pdns-recursor-3.1.7-2.fc9
http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-6

Changelogs
http://wiki.powerdns.com/cgi-bin/trac.fcgi/changeset/1179

FromTrac · PowerDNS/pdns Wiki · GitHub
Patch
http://secunia.com/advisories/31311

About Secunia Research | Flexera
https://exchange.xforce.ibmcloud.com/vulnerabilities/43925

PowerDNS Recursor random number generator weak security CVE-2008-3217 Vulnerability Report
http://www.securityfocus.com/bid/30782