Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2007-2453 | First vendor Publication | 2007-06-11 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:H/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 1.2 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | High |
| Cvss Expoit Score | 1.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2453 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:9960 | |||
| Oval ID: | oval:org.mitre.oval:def:9960 | ||
| Title: | The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source. | ||
| Description: | The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2007-2453 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-04-09 | Name : Mandriva Update for kernel MDKSA-2007:171 (kernel) File : nvt/gb_mandriva_MDKSA_2007_171.nasl |
| 2009-03-23 | Name : Ubuntu Update for linux-source-2.6.20 vulnerabilities USN-470-1 File : nvt/gb_ubuntu_USN_470_1.nasl |
| 2009-03-23 | Name : Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-486-1 File : nvt/gb_ubuntu_USN_486_1.nasl |
| 2009-03-23 | Name : Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1 File : nvt/gb_ubuntu_USN_489_1.nasl |
| 2009-03-23 | Name : Ubuntu Update for redhat-cluster-suite vulnerability USN-489-2 File : nvt/gb_ubuntu_USN_489_2.nasl |
| 2009-02-27 | Name : Fedora Update for kernel FEDORA-2007-0409 File : nvt/gb_fedora_2007_0409_kernel_fc7.nasl |
| 2009-02-27 | Name : Fedora Update for kernel FEDORA-2007-599 File : nvt/gb_fedora_2007_599_kernel_fc5.nasl |
| 2009-02-27 | Name : Fedora Update for kernel FEDORA-2007-600 File : nvt/gb_fedora_2007_600_kernel_fc6.nasl |
| 2009-01-28 | Name : SuSE Update for kernel SUSE-SA:2007:043 File : nvt/gb_suse_2007_043.nasl |
| 2009-01-28 | Name : SuSE Update for kernel SUSE-SA:2007:051 File : nvt/gb_suse_2007_051.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 1356-1 (linux-2.6) File : nvt/deb_1356_1.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 1363-1 (linux-2.6) File : nvt/deb_1363_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 37114 | Linux Kernel Random Number Generator Multiple Weaknesses |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2007-0376.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20070614_kernel_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2012-05-17 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kernel-4186.nasl - Type : ACT_GATHER_INFO |
| 2010-01-06 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2007-0376.nasl - Type : ACT_GATHER_INFO |
| 2007-12-13 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kernel-4185.nasl - Type : ACT_GATHER_INFO |
| 2007-11-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-489-2.nasl - Type : ACT_GATHER_INFO |
| 2007-11-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-489-1.nasl - Type : ACT_GATHER_INFO |
| 2007-11-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-486-1.nasl - Type : ACT_GATHER_INFO |
| 2007-11-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-470-1.nasl - Type : ACT_GATHER_INFO |
| 2007-11-06 | Name : The remote Fedora host is missing a security update. File : fedora_2007-0409.nasl - Type : ACT_GATHER_INFO |
| 2007-10-17 | Name : The remote openSUSE host is missing a security update. File : suse_kernel-3760.nasl - Type : ACT_GATHER_INFO |
| 2007-10-17 | Name : The remote SuSE system is missing the security patch kernel-4193. File : suse_kernel-4193.nasl - Type : ACT_GATHER_INFO |
| 2007-09-03 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2007-171.nasl - Type : ACT_GATHER_INFO |
| 2007-09-03 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1363.nasl - Type : ACT_GATHER_INFO |
| 2007-08-21 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1356.nasl - Type : ACT_GATHER_INFO |
| 2007-06-27 | Name : The remote Fedora Core host is missing a security update. File : fedora_2007-600.nasl - Type : ACT_GATHER_INFO |
| 2007-06-27 | Name : The remote Fedora Core host is missing a security update. File : fedora_2007-599.nasl - Type : ACT_GATHER_INFO |
| 2007-06-18 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-0376.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:17:08 |
|
| 2024-11-28 12:12:14 |
|
| 2024-08-02 12:06:49 |
|
| 2024-08-02 01:02:17 |
|
| 2024-02-02 01:06:27 |
|
| 2024-02-01 12:02:16 |
|
| 2023-09-05 12:06:02 |
|
| 2023-09-05 01:02:08 |
|
| 2023-09-02 12:06:08 |
|
| 2023-09-02 01:02:08 |
|
| 2023-08-12 12:07:08 |
|
| 2023-08-12 01:02:08 |
|
| 2023-08-11 12:06:10 |
|
| 2023-08-11 01:02:12 |
|
| 2023-08-06 12:05:53 |
|
| 2023-08-06 01:02:09 |
|
| 2023-08-04 12:05:59 |
|
| 2023-08-04 01:02:12 |
|
| 2023-07-14 12:05:57 |
|
| 2023-07-14 01:02:10 |
|
| 2023-03-29 01:06:39 |
|
| 2023-03-28 12:02:15 |
|
| 2022-10-11 12:05:17 |
|
| 2022-10-11 01:02:00 |
|
| 2021-05-04 12:05:44 |
|
| 2021-04-22 01:06:18 |
|
| 2020-05-23 00:19:42 |
|
| 2018-10-31 00:19:48 |
|
| 2017-10-11 09:23:56 |
|
| 2017-07-29 12:02:12 |
|
| 2016-06-28 16:26:30 |
|
| 2016-04-26 16:05:19 |
|
| 2014-02-17 10:40:06 |
|
| 2013-05-11 10:25:04 |
|
| 2012-11-07 00:15:05 |
|
