CVE-2008-3217 Weak cryptography in n/a
Weak random number generation in PowerDNS Recursor allows remote attackers to conduct DNS cache poisoning attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-3217?
CVE-2008-3217 is a medium-severity vulnerability in Powerdns Recursor, published on 18 Jul 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
Weakness: CWE-189
Which versions are affected by CVE-2008-3217?
It affects 1 product.
Products include Powerdns Recursor.
How do I fix CVE-2008-3217?
Upgrade to a fixed version.
Is CVE-2008-3217 being exploited?
There is no known exploitation of CVE-2008-3217 in the wild and no public exploit code.
Other vulnerabilities in Powerdns Recursor
- CVE-2009-4009 Memory corruption in n/a
- CVE-2020-10030 Memory corruption in n/a
- CVE-2025-59023 Crafted delegations or IP fragments can poison cached delegations in Recursor
- CVE-2025-59030 Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor
- CVE-2023-22617 Denial of service in n/a
Sources
Also known as DEBIAN-CVE-2008-3217, GHSA-2v8f-3jfm-64p5.