diff --git a/CHANGELOG b/CHANGELOG
index a529c9fd9..f6db28632 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -48,6 +48,9 @@ o [NSE][GH#1838] Scripts dhcp-discover and broadcast-dhcp-discover now support
 o [NSE] Code improvements in RPC Dump, benefitting NFS-related scripts
   [nnposter]
 
+o [NSE] RPC code was using incorrect port range, which was causing some calls,
+  such as NFS mountd, to fail intermittently [nnposter]
+
 o [NSE][GH#1876] XML output from script ssl-cert now includes RSA key modulus
   and exponent [nnposter]
 
diff --git a/nselib/rpc.lua b/nselib/rpc.lua
index 3e5487b2d..6d0595062 100644
--- a/nselib/rpc.lua
+++ b/nselib/rpc.lua
@@ -172,7 +172,7 @@ Comm = {
       if nmap.is_privileged() then
         -- Try to bind to a reserved port
         for i = 1, 10, 1 do
-          local resvport = math.random(1, 1024)
+          local resvport = math.random(512, 1023)
           socket = new_socket()
           status, err = socket:bind(nil, resvport)
           if status then
@@ -189,7 +189,7 @@ Comm = {
       if nmap.is_privileged() then
         -- Try to bind to a reserved port
         for i = 1, 10, 1 do
-          local resvport = math.random(1, 1024)
+          local resvport = math.random(512, 1023)
           socket = new_socket("udp")
           status, err = socket:bind(nil, resvport)
           if status then