CVE-2008-3217
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for...
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
Exploit likelihood
What each source reports
NVD Score used
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
- Record
CVE-2008-3217- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
- Record
CVE-2008-3217- Updated
- 2026-11-02
EUVDEUVD-2008-3207 No score
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
- Record
EUVD-2008-3207- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2v8f-3jfm-64p5 No score
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for...
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
- Record
GHSA-2v8f-3jfm-64p5- Updated
- 2026-11-02
OSV No score
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
- Record
CVE-2008-3217- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-3217 No score
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.
- Record
DEBIAN-CVE-2008-3217- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pdns-recursorDebian:12 |
before 3.1.7-1 | 3.1.7-1 |
pdns-recursorDebian:13 |
before 3.1.7-1 | 3.1.7-1 |
pdns-recursorDebian:14 |
before 3.1.7-1 | 3.1.7-1 |
pdns-recursorDebian:4.0 From an advisory covering 2 CVEs |
before 3.1.4-1+etch2, plus listed versions 3.1.4-13.1.4-1+etch1 |
3.1.4-1+etch2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3217 is a medium vulnerability (CVSS 6.8) in Powerdns Recursor, published July 16, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. Fixed in pdns-recursor 3.1.7-1.