CVE-2008-5162

Опубликовано: 26 нояб. 2008

Источник: nvd

CVSS3: 7

CVSS2: 6.9

EPSS Низкий

Описание

The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.

Ссылки

http://osvdb.org/50137
Broken Link
http://secunia.com/advisories/32871
Broken Link
http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc
Vendor Advisory
http://securitytracker.com/id?1021276
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/32447
Broken Link
Third Party Advisory
VDB Entry
http://osvdb.org/50137
Broken Link
http://secunia.com/advisories/32871
Broken Link
http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc
Vendor Advisory
http://securitytracker.com/id?1021276
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/32447
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*

Версия от 6.4 (включая) до 7.0 (исключая)

cpe:2.3:o:freebsd:freebsd:6.3:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.0:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.0:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.0:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.0:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.0:p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p10:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p12:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p13:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p14:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p15:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p16:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p6:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p7:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p8:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:p9:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:rc2:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00063

Низкий

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-330

Связанные уязвимости

CVE-2008-5162

CVSS3: 7

debian

около 17 лет назад

The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does ...

GHSA-9jr8-q773-x8pc

CVSS3: 7

github

больше 3 лет назад

EPSS

Процентиль: 20%

0.00063

Низкий

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-330