VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 18, 2008· Updated Apr 23, 2026

CVE-2008-4099

CVE-2008-4099

Description

PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

Affected products

10
  • Debian/Python Dns10 versions
    cpe:2.3:a:debian:python-dns:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:debian:python-dns:*:*:*:*:*:*:*:*range: <=2.3.1-3
    • cpe:2.3:a:debian:python-dns:2.3.0-1:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.0-2:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.0-3:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.0-4:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.0-5:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.0-5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.0-6:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.1-1:*:*:*:*:*:*:*
    • cpe:2.3:a:debian:python-dns:2.3.1-2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.