Threat Investigation
Request a demo

CVE-2024-10604

Medium

Description

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances

SeverityMedium
CVSS5.3
Exploit probability—
ProductGoogle Fuchsia
PublishedJan 30, 2025
First seenJan 30, 2025
Weakness typeCWE-330CWE-330

How to fix

Update
  • google fuchsiaf16, f20 or later

Affected products

ProductAffected versionsFixed in
google fuchsiav < f16, f17 ≤ v < f20f16, f20

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.