CVE-2008-3217: Medium severity powerdns vulnerability
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3217?
CVE-2008-3217 has a medium severity rating due to the potential for remote attacks leading to DNS cache poisoning.
How do I fix CVE-2008-3217?
To fix CVE-2008-3217, upgrade PowerDNS Recursor to version 3.1.6 or later, which incorporates better random number generation.
What versions of PowerDNS are affected by CVE-2008-3217?
CVE-2008-3217 affects PowerDNS Recursor versions prior to 3.1.6 including 3.1.5 and earlier.
What is the impact of exploiting CVE-2008-3217?
Exploiting CVE-2008-3217 could allow attackers to conduct DNS cache poisoning, leading to potential redirection of users to malicious sites.
Is CVE-2008-3217 still relevant for modern PowerDNS installations?
CVE-2008-3217 is mostly relevant for older installations of PowerDNS, as newer versions have addressed the issue.