NVD

Id
50443  
Name
CVE-2009-3238  
Description
The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function"s tendency to "return the same value over and over again for long stretches of time."  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-09-18  
Modified Date
2012-03-19  
Seq
2009-3238  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255175 50443 CVE-2009-3238 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02  View
255176 50443 CVE-2009-3238 SUSE-SA:2009:054  View
255177 50443 CVE-2009-3238 SUSE-SA:2010:012  View
255178 50443 CVE-2009-3238 oval:org.mitre.oval:def:11168  View
255179 50443 CVE-2009-3238 http://patchwork.kernel.org/patch/21766/  View
255180 50443 CVE-2009-3238 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30  View
255181 50443 CVE-2009-3238 RHSA-2009:1438  View
255182 50443 CVE-2009-3238 USN-852-1  View
255183 50443 CVE-2009-3238 https://bugzilla.redhat.com/show_bug.cgi?id=499785  View
255184 50443 CVE-2009-3238 https://bugzilla.redhat.com/show_bug.cgi?id=519692  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41166 JVNDB-2009-002173 Linux kernel の get_random_int 関数における防御メカニズムが破られる脆弱性 Linux kernel の get_random_int 関数には、ランダム数の生成が不十分であるため、ランダム化に基づく防御メカニズムが破られる脆弱性が存在します。 CVE-2009-3238 40669 CVE-2009-3238 50443 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002173.html 2009-09-15 2009-11-04 View