VDB
CVE-2008-5162
CVE-2008-5162
PUBLISHED
CVSS 7 HIGH
The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.
EPSS 0.32% · 23.3th percentile
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.32%
23.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| freebsd | freebsd | 6.4, 6.3, 6.3 |
| n/a | n/a | * |
Timeline
- Nov 26, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 31, 2023 EPSS Score
References
- 32871 third-party-advisory
- 1021276 vdb
- 32447 vdb
- FreeBSD-SA-08:11 vendor-advisory
- 50137 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2008-5162 advisory