VDB

CVE-2007-4311

CVE-2007-4311 PUBLISHED CVSS 6.800000190734863 MEDIUM

The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first few bytes of a buffer, which might make it easier for attackers to predict the output of the random number generator, related to incorrect use of the sizeof operator.

EPSS 0.67% · 71.8th percentile

Risk Scores

CVSS 2.0
6.800000190734863
EPSS Score
0.67%
71.8th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel0
n/an/an/a

Exploit Intelligence

Timeline

  • Aug 13, 2007 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • May 25, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›