In NetBSD up to and including 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.
netbsd netbsd