Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x5r5-q987-6xf6

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071.

IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071.

EPSS

Процентиль: 71%
0.00677
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-335

Связанные уязвимости

CVSS3: 7.4
nvd
почти 8 лет назад

IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071.

EPSS

Процентиль: 71%
0.00677
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-335