CVE-2007-4311 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-4311
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4311

Description: The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.

CVE Status: Candidate

References: SAID Secunia Advisory: SA29058 DEBIAN http://www.debian.org/security/2008/dsa-1503 CONFIRM http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=bd67d4c7b11cc33ebdc346bc8926d255b354cd64 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6 BID 25029

Return to the previous page.