CVE-2008-4100: GNU Adns

Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days.

GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: the vendor reports that this is intended behavior and is compatible with the product's intended role in a trusted environment.

Affected products

• GNU Adns: up to and including 1.4; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2008-09-18. Last modified 2026-06-16.