Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2008-1146

Published: Mar 04, 2008 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2008-1146
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka Algorithm X3), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSDs modification of BIND.

Affected Software

NameVendorStart VersionEnd Version
Mac_os_xApple10.0 (including)10.0 (including)
Mac_os_xApple10.0.1 (including)10.0.1 (including)
Mac_os_xApple10.0.2 (including)10.0.2 (including)
Mac_os_xApple10.0.3 (including)10.0.3 (including)
Mac_os_xApple10.0.4 (including)10.0.4 (including)
Mac_os_xApple10.1 (including)10.1 (including)
Mac_os_xApple10.1.1 (including)10.1.1 (including)
Mac_os_xApple10.1.2 (including)10.1.2 (including)
Mac_os_xApple10.1.3 (including)10.1.3 (including)
Mac_os_xApple10.1.4 (including)10.1.4 (including)
Mac_os_xApple10.1.5 (including)10.1.5 (including)
Mac_os_xApple10.2 (including)10.2 (including)
Mac_os_xApple10.2.1 (including)10.2.1 (including)
Mac_os_xApple10.2.2 (including)10.2.2 (including)
Mac_os_xApple10.2.3 (including)10.2.3 (including)
Mac_os_xApple10.2.4 (including)10.2.4 (including)
Mac_os_xApple10.2.5 (including)10.2.5 (including)
Mac_os_xApple10.2.6 (including)10.2.6 (including)
Mac_os_xApple10.2.7 (including)10.2.7 (including)
Mac_os_xApple10.2.8 (including)10.2.8 (including)
Mac_os_xApple10.3 (including)10.3 (including)
Mac_os_xApple10.3.1 (including)10.3.1 (including)
Mac_os_xApple10.3.2 (including)10.3.2 (including)
Mac_os_xApple10.3.3 (including)10.3.3 (including)
Mac_os_xApple10.3.4 (including)10.3.4 (including)
Mac_os_xApple10.3.5 (including)10.3.5 (including)
Mac_os_xApple10.3.6 (including)10.3.6 (including)
Mac_os_xApple10.3.7 (including)10.3.7 (including)
Mac_os_xApple10.3.8 (including)10.3.8 (including)
Mac_os_xApple10.3.9 (including)10.3.9 (including)
Mac_os_xApple10.4 (including)10.4 (including)
Mac_os_xApple10.4.1 (including)10.4.1 (including)
Mac_os_xApple10.4.2 (including)10.4.2 (including)
Mac_os_xApple10.4.3 (including)10.4.3 (including)
Mac_os_xApple10.4.4 (including)10.4.4 (including)
Mac_os_xApple10.4.5 (including)10.4.5 (including)
Mac_os_xApple10.4.6 (including)10.4.6 (including)
Mac_os_xApple10.4.7 (including)10.4.7 (including)
Mac_os_xApple10.4.8 (including)10.4.8 (including)
Mac_os_xApple10.4.9 (including)10.4.9 (including)
Mac_os_xApple10.4.10 (including)10.4.10 (including)
Mac_os_xApple10.4.11 (including)10.4.11 (including)
Mac_os_xApple10.5 (including)10.5 (including)
Mac_os_xApple10.5.1 (including)10.5.1 (including)
Mac_os_x_serverApple10.0 (including)10.0 (including)
Mac_os_x_serverApple10.1 (including)10.1 (including)
Mac_os_x_serverApple10.1.1 (including)10.1.1 (including)
Mac_os_x_serverApple10.1.2 (including)10.1.2 (including)
Mac_os_x_serverApple10.1.3 (including)10.1.3 (including)
Mac_os_x_serverApple10.1.4 (including)10.1.4 (including)
Mac_os_x_serverApple10.1.5 (including)10.1.5 (including)
Mac_os_x_serverApple10.2 (including)10.2 (including)
Mac_os_x_serverApple10.2.1 (including)10.2.1 (including)
Mac_os_x_serverApple10.2.2 (including)10.2.2 (including)
Mac_os_x_serverApple10.2.3 (including)10.2.3 (including)
Mac_os_x_serverApple10.2.4 (including)10.2.4 (including)
Mac_os_x_serverApple10.2.5 (including)10.2.5 (including)
Mac_os_x_serverApple10.2.6 (including)10.2.6 (including)
Mac_os_x_serverApple10.2.7 (including)10.2.7 (including)
Mac_os_x_serverApple10.2.8 (including)10.2.8 (including)
Mac_os_x_serverApple10.3 (including)10.3 (including)
Mac_os_x_serverApple10.3.1 (including)10.3.1 (including)
Mac_os_x_serverApple10.3.2 (including)10.3.2 (including)
Mac_os_x_serverApple10.3.3 (including)10.3.3 (including)
Mac_os_x_serverApple10.3.4 (including)10.3.4 (including)
Mac_os_x_serverApple10.3.5 (including)10.3.5 (including)
Mac_os_x_serverApple10.3.6 (including)10.3.6 (including)
Mac_os_x_serverApple10.3.7 (including)10.3.7 (including)
Mac_os_x_serverApple10.3.8 (including)10.3.8 (including)
Mac_os_x_serverApple10.3.9 (including)10.3.9 (including)
Mac_os_x_serverApple10.4 (including)10.4 (including)
Mac_os_x_serverApple10.4.1 (including)10.4.1 (including)
Mac_os_x_serverApple10.4.2 (including)10.4.2 (including)
Mac_os_x_serverApple10.4.3 (including)10.4.3 (including)
Mac_os_x_serverApple10.4.4 (including)10.4.4 (including)
Mac_os_x_serverApple10.4.5 (including)10.4.5 (including)
Mac_os_x_serverApple10.4.6 (including)10.4.6 (including)
Mac_os_x_serverApple10.4.7 (including)10.4.7 (including)
Mac_os_x_serverApple10.4.8 (including)10.4.8 (including)
Mac_os_x_serverApple10.4.9 (including)10.4.9 (including)
Mac_os_x_serverApple10.4.10 (including)10.4.10 (including)
Mac_os_x_serverApple10.4.11 (including)10.4.11 (including)
Mac_os_x_serverApple10.5 (including)10.5 (including)
DragonflybsdDragonflybsd1.0 (including)1.0 (including)
DragonflybsdDragonflybsd1.1 (including)1.1 (including)
DragonflybsdDragonflybsd1.2 (including)1.2 (including)
DragonflybsdDragonflybsd1.10.1 (including)1.10.1 (including)
FreebsdFreebsd4.4 (including)4.4 (including)
FreebsdFreebsd4.4-release_p42 (including)4.4-release_p42 (including)
FreebsdFreebsd4.4-releng (including)4.4-releng (including)
FreebsdFreebsd4.4-stable (including)4.4-stable (including)
FreebsdFreebsd4.5 (including)4.5 (including)
FreebsdFreebsd4.5-release (including)4.5-release (including)
FreebsdFreebsd4.5-release_p32 (including)4.5-release_p32 (including)
FreebsdFreebsd4.5-releng (including)4.5-releng (including)
FreebsdFreebsd4.5-stable (including)4.5-stable (including)
FreebsdFreebsd4.6 (including)4.6 (including)
FreebsdFreebsd4.6-release (including)4.6-release (including)
FreebsdFreebsd4.6-release_p20 (including)4.6-release_p20 (including)
FreebsdFreebsd4.6-releng (including)4.6-releng (including)
FreebsdFreebsd4.6-stable (including)4.6-stable (including)
FreebsdFreebsd4.6.2 (including)4.6.2 (including)
FreebsdFreebsd4.7 (including)4.7 (including)
FreebsdFreebsd4.7-release (including)4.7-release (including)
FreebsdFreebsd4.7-release_p17 (including)4.7-release_p17 (including)
FreebsdFreebsd4.7-releng (including)4.7-releng (including)
FreebsdFreebsd4.7-stable (including)4.7-stable (including)
FreebsdFreebsd4.8 (including)4.8 (including)
FreebsdFreebsd4.8-release_p7 (including)4.8-release_p7 (including)
FreebsdFreebsd4.8-releng (including)4.8-releng (including)
FreebsdFreebsd4.8_prerelease (including)4.8_prerelease (including)
FreebsdFreebsd4.9 (including)4.9 (including)
FreebsdFreebsd4.9-releng (including)4.9-releng (including)
FreebsdFreebsd4.9_prerelease (including)4.9_prerelease (including)
FreebsdFreebsd4.10 (including)4.10 (including)
FreebsdFreebsd4.10-release (including)4.10-release (including)
FreebsdFreebsd4.10-release_p8 (including)4.10-release_p8 (including)
FreebsdFreebsd4.10-releng (including)4.10-releng (including)
FreebsdFreebsd4.10_prerelease (including)4.10_prerelease (including)
FreebsdFreebsd4.11-release_p3 (including)4.11-release_p3 (including)
FreebsdFreebsd4.11-releng (including)4.11-releng (including)
FreebsdFreebsd4.11-stable (including)4.11-stable (including)
FreebsdFreebsd4.11_p20_release (including)4.11_p20_release (including)
FreebsdFreebsd4.11_release (including)4.11_release (including)
FreebsdFreebsd5.0 (including)5.0 (including)
FreebsdFreebsd5.0-alpha (including)5.0-alpha (including)
FreebsdFreebsd5.0-release_p14 (including)5.0-release_p14 (including)
FreebsdFreebsd5.0-releng (including)5.0-releng (including)
FreebsdFreebsd5.1 (including)5.1 (including)
FreebsdFreebsd5.1-alpha (including)5.1-alpha (including)
FreebsdFreebsd5.1-release (including)5.1-release (including)
FreebsdFreebsd5.1-release_p5 (including)5.1-release_p5 (including)
FreebsdFreebsd5.1-releng (including)5.1-releng (including)
FreebsdFreebsd5.2 (including)5.2 (including)
FreebsdFreebsd5.2.1-release (including)5.2.1-release (including)
FreebsdFreebsd5.2.1-releng (including)5.2.1-releng (including)
FreebsdFreebsd5.3 (including)5.3 (including)
FreebsdFreebsd5.3-release (including)5.3-release (including)
FreebsdFreebsd5.3-releng (including)5.3-releng (including)
FreebsdFreebsd5.3-stable (including)5.3-stable (including)
FreebsdFreebsd5.4-release (including)5.4-release (including)
FreebsdFreebsd5.4-releng (including)5.4-releng (including)
FreebsdFreebsd5.4-stable (including)5.4-stable (including)
FreebsdFreebsd5.5_release (including)5.5_release (including)
FreebsdFreebsd5.5_stable (including)5.5_stable (including)
FreebsdFreebsd6.0 (including)6.0 (including)
FreebsdFreebsd6.0-release (including)6.0-release (including)
FreebsdFreebsd6.0-stable (including)6.0-stable (including)
FreebsdFreebsd6.0_p5_release (including)6.0_p5_release (including)
FreebsdFreebsd6.1 (including)6.1 (including)
FreebsdFreebsd6.1-release (including)6.1-release (including)
FreebsdFreebsd6.1-release_p10 (including)6.1-release_p10 (including)
FreebsdFreebsd6.1-stable (including)6.1-stable (including)
FreebsdFreebsd6.2 (including)6.2 (including)
FreebsdFreebsd6.2-stable (including)6.2-stable (including)
FreebsdFreebsd6.2_releng (including)6.2_releng (including)
FreebsdFreebsd6.3 (including)6.3 (including)
FreebsdFreebsd6.3_releng (including)6.3_releng (including)
FreebsdFreebsd7.0-pre-release (including)7.0-pre-release (including)
FreebsdFreebsd7.0_beta4 (including)7.0_beta4 (including)
FreebsdFreebsd7.0_releng (including)7.0_releng (including)
NetbsdNetbsd1.6.2 (including)1.6.2 (including)
NetbsdNetbsd2.0 (including)2.0 (including)
NetbsdNetbsd2.0.1 (including)2.0.1 (including)
NetbsdNetbsd2.0.2 (including)2.0.2 (including)
NetbsdNetbsd2.0.3 (including)2.0.3 (including)
NetbsdNetbsd2.0.4 (including)2.0.4 (including)
NetbsdNetbsd2.1 (including)2.1 (including)
NetbsdNetbsd2.1.1 (including)2.1.1 (including)
NetbsdNetbsd3.0.1 (including)3.0.1 (including)
NetbsdNetbsd3.0.2 (including)3.0.2 (including)
NetbsdNetbsd3.1 (including)3.1 (including)
NetbsdNetbsd3.1-rc1 (including)3.1-rc1 (including)
NetbsdNetbsd3.1-rc3 (including)3.1-rc3 (including)
NetbsdNetbsd4.0 (including)4.0 (including)
NetbsdNetbsd4.0-beta (including)4.0-beta (including)
NetbsdNetbsd4.0-beta2 (including)4.0-beta2 (including)
OpenbsdOpenbsd2.6 (including)2.6 (including)
OpenbsdOpenbsd2.7 (including)2.7 (including)
OpenbsdOpenbsd2.8 (including)2.8 (including)
OpenbsdOpenbsd2.9 (including)2.9 (including)
OpenbsdOpenbsd3.0 (including)3.0 (including)
OpenbsdOpenbsd3.1 (including)3.1 (including)
OpenbsdOpenbsd3.2 (including)3.2 (including)
OpenbsdOpenbsd3.3 (including)3.3 (including)
OpenbsdOpenbsd3.4 (including)3.4 (including)
OpenbsdOpenbsd3.5 (including)3.5 (including)
OpenbsdOpenbsd3.6 (including)3.6 (including)
OpenbsdOpenbsd3.7 (including)3.7 (including)
OpenbsdOpenbsd3.8 (including)3.8 (including)
OpenbsdOpenbsd3.9 (including)3.9 (including)
OpenbsdOpenbsd4.0 (including)4.0 (including)
OpenbsdOpenbsd4.1 (including)4.1 (including)
OpenbsdOpenbsd4.2 (including)4.2 (including)

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use