CVE-2008-1637: PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP sourc...

Security readout for executives and security teams

This flaw affects PowerDNS Recursor versions before 3.1.5. Weak randomness in DNS transaction IDs and UDP source ports could make DNS cache poisoning easier, potentially redirecting users to attacker-controlled destinations. The supplied sources do not provide a CVSS score or confirm active exploitation. Exposure is most relevant where an organization runs PowerDNS Recursor before 3.1.5, especially as a recursive resolver serving users or networks. Systems not using PowerDNS Recursor are not indicated as affected by the supplied bundle. Treat this as urgent for any legacy PowerDNS Recursor still in service. DNS cache poisoning can undermine user trust and redirect traffic. If no affected resolver remains, the business risk is historical and should be closed through inventory evidence. Mitigation focus: Upgrade PowerDNS Recursor to 3.1.5 or a vendor-fixed distribution package.; Check Debian, Fedora, Gentoo, and SUSE advisories for package-specific guidance.; Prioritize recursive resolvers serving users or exposed networks..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.