NVD

Id
56436  
Name
CVE-2007-4311  
Description
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-13  
Modified Date
2011-05-25  
Seq
2007-4311  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287467 56436 CVE-2007-4311 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=bd67d4c7b11cc33ebdc346bc8926d255b354cd64  View
287468 56436 CVE-2007-4311 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925  View
287469 56436 CVE-2007-4311 DSA-1503  View
287470 56436 CVE-2007-4311 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6  View
287471 56436 CVE-2007-4311 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35  View
287472 56436 CVE-2007-4311 25029  View
287473 56436 CVE-2007-4311 ADV-2007-2690  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55571 JVNDB-2007-004263 Linux kernel の drivers/char/random.c における乱数ジェネレータの出力を予測される脆弱性 Linux kernel の drivers/char/random.c の xfer_secondary_pool 関数は、バッファの最初の数バイトのみに reseed 操作を実行する、および sizeof 演算子の間違った利用に関する処理に不備があるため、乱数ジェネレータの出力を予測される脆弱性が存在します。 CVE-2007-4311 27666 CVE-2007-4311 56436 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004263.html 2007-08-13 2012-09-25 View