In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.
References
Link | Resource |
---|---|
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc | Vendor Advisory |
https://arxiv.org/pdf/2112.09604.pdf | Technical Description Third Party Advisory |
Configurations
History
10 Jan 2022, 19:33
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CWE | CWE-338 | |
References | (MISC) https://arxiv.org/pdf/2112.09604.pdf - Technical Description, Third Party Advisory | |
References | (MISC) http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc - Vendor Advisory | |
CPE | cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:* |
25 Dec 2021, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-12-25 02:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-45489
Mitre link : CVE-2021-45489
CVE.ORG link : CVE-2021-45489
JSON object : View
Products Affected
netbsd
- netbsd
CWE
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)