Home > Vulnerability Database > CVE-2007-2453

Mend.io Vulnerability Database

CVE-2007-2453

Date: June 11, 2007

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.

Severity Score

2.9

Related Resources (31)

Url: http://www.ubuntu.com/usn/usn-486-1

Url: http://secunia.com/advisories/26450

Url: http://www.securitytracker.com/id?1018248

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:216

Url: http://osvdb.org/37114

Url: http://www.vupen.com/english/advisories/2007/2105

Url: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:196

Url: http://secunia.com/advisories/25596

Url: http://www.securityfocus.com/bid/24390

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:171

Url: http://secunia.com/advisories/26664

Url: http://secunia.com/advisories/26620

Url: http://www.ubuntu.com/usn/usn-489-1

Url: http://www.novell.com/linux/security/advisories/2007_51_kernel.html

Url: http://www.ubuntu.com/usn/usn-470-1

Url: https://access.redhat.com/security/cve/CVE-2007-2453

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/34781

Url: http://marc.info/?l=linux-kernel&m=118128610219959&w=2

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2007-2453

Url: http://www.debian.org/security/2007/dsa-1356

Url: http://marc.info/?l=linux-kernel&m=118128622431272&w=2

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9960

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-2453

Url: http://secunia.com/advisories/25700

Url: http://www.novell.com/linux/security/advisories/2007_43_kernel.html

Url: https://rhn.redhat.com/errata/RHSA-2007-0376.html

Url: http://secunia.com/advisories/26133

Url: http://secunia.com/advisories/26139

Url: http://secunia.com/advisories/25961

Url: https://www.mend.io/vulnerability-database/CVE-2007-2453

Severity Score

2.9

CVSS v3.1

Base Score:	2.9
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	1.2
Access Vector (AV):	LOCAL
Access Complexity (AC):	HIGH
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2007-2453

Date: June 11, 2007

Severity Score

Related Resources (31)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?