CVE - CVE-2007-4311

CVE-ID
CVE-2007-4311	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:25029 URL:http://www.securityfocus.com/bid/25029 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=bd67d4c7b11cc33ebdc346bc8926d255b354cd64 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.34.y.git;a=commit;h=faa3369ac2ea7feb0dd266b6a5e8d6ab153cf925 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.6 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35 DEBIAN:DSA-1503 URL:http://www.debian.org/security/2008/dsa-1503 SECUNIA:29058 URL:http://secunia.com/advisories/29058 VUPEN:ADV-2007-2690 URL:~~http://www.vupen.com/english/advisories/2007/2690~~ (Obsolete source)
Assigning CNA
MITRE Corporation
Date Record Created
20070813	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070813)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)