CVE-2008-5162
High
Description
The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.
SeverityHigh
CVSS7.0
Exploit probability—
Product
Freebsd
PublishedNov 26, 2008
First seenNov 26, 2008
How to fix
Update
- freebsd freebsd7.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd freebsd | 6.4 ≤ v < 7.0, 6.3, 7.0, 7.1 | 7.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.