AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2008-1146

MEDIUM · CVSS 6.8 EPSS 1.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-03-04 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2008-1146
Severity
MEDIUM
CVSS
6.8
EPSS
1.38%

Original Filing — NVD Description

A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND.