In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.
References
Link | Resource |
---|---|
https://arxiv.org/pdf/2112.09604.pdf | Third Party Advisory |
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc | Vendor Advisory |
Configurations
Information
Published : 2021-12-24 18:15
Updated : 2022-01-10 13:03
NVD link : CVE-2021-45484
Mitre link : CVE-2021-45484
JSON object : View
CWE
CWE-326
Inadequate Encryption Strength
Products Affected
netbsd
- netbsd