CVE-2008-4099

MEDIUM · CVSS 6.4 EPSS 2.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-09-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-4099

Severity

MEDIUM

CVSS

6.4

EPSS

2.28%

Linux Debian

Original Filing — NVD Description

PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.