In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.