Security Advisory

CVE-2008-5162

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-11-26 23:00:00

Last updated 2024-08-07 10:40:17

Assigner freebsd

State PUBLISHED

Description

The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the functions return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.

← Browse all CVEs View on cve.org ↗