Skip to content
OpenAdvisories
Unscored DSA-1544-2 2 CVEs

pdns-recursor - predictable randomness

Published Jul 16, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 pdns-recursor 3.1.4-1+etch2

Vulnerabilities 2

  • Unscored —
    CVE-2008-1637

    PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbe…

    pdns-recursor Debian
  • Unscored —
    CVE-2008-3217

    PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, whi…

    pdns-recursor Debian