CVE

Id
27668  
CVE No.
CVE-2007-4311  
Status
Candidate  
Description
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.  
Phase
Assigned (20070813)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284825 27668 CVE-2007-4311 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35  View
284826 27668 CVE-2007-4311 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=bd67d4c7b11cc33ebdc346bc8926d255b354cd64  View
284827 27668 CVE-2007-4311 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925  View
284828 27668 CVE-2007-4311 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6  View
284829 27668 CVE-2007-4311 DEBIAN:DSA-1503  View
284830 27668 CVE-2007-4311 URL:http://www.debian.org/security/2008/dsa-1503  View
284831 27668 CVE-2007-4311 BID:25029  View
284832 27668 CVE-2007-4311 URL:http://www.securityfocus.com/bid/25029  View
284833 27668 CVE-2007-4311 VUPEN:ADV-2007-2690  View
284834 27668 CVE-2007-4311 URL:http://www.vupen.com/english/advisories/2007/2690  View
284835 27668 CVE-2007-4311 SECUNIA:29058  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55573 JVNDB-2007-004265 Php Blue Dragon CMS における PHP リモートファイルインクルージョンの脆弱性 Php Blue Dragon CMS の public_includes/pub_blocks/activecontent.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-4313 27668 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004265.html  View