CVE-2008-1637
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.0%
PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic deficiencies in rand and random functions in external libraries, (b) use of a 32-bit seed value, and (c) choice of the time of day as the sole seeding information.
Produtos afetados
n/a · n/aReferências
http://doc.powerdns.com/changelog.htmlhttp://doc.powerdns.com/powerdns-advisory-2008-01.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.htmlhttp://secunia.com/advisories/29584http://secunia.com/advisories/29737http://secunia.com/advisories/29764http://secunia.com/advisories/29830http://secunia.com/advisories/30581http://security.gentoo.org/glsa/glsa-200804-22.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/41534https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00198.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-April/msg00224.html