Skip to main content

Netbsd CVE-2021-45487

HIGH
Use of Insufficiently Random Values (CWE-330)
2021-12-25 cve@mitre.org
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 25, 2021 - 02:15 nvd
HIGH 7.5

DescriptionNVD

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.

AnalysisAI

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-330. In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures. Affected products include: Netbsd. Version information: through 9.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Netbsd

View all
CVE-2012-0217 HIGH POC
7.2 Jun 12

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and

CVE-2014-8517 HIGH POC
7.5 Nov 17

The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro

CVE-2024-6387 HIGH POC
8.1 Jul 01

Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to

CVE-2017-1000375 CRITICAL POC
9.8 Jun 19

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attacke

CVE-2016-6253 HIGH POC
7.8 Jan 20

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

CVE-2017-1000378 CRITICAL
9.8 Jun 19

The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N

CVE-2017-1000374 CRITICAL
9.8 Jun 19

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitra

CVE-2015-8212 CRITICAL
9.8 Jan 19

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execut

CVE-2020-26139 MEDIUM
5.3 May 11

An issue was discovered in the kernel in NetBSD 7.1. Rated medium severity (CVSS 5.3), this vulnerability is no authenti

CVE-2021-45489 HIGH
7.5 Dec 25

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG. Rated high severity (

CVE-2021-45488 HIGH
7.5 Dec 25

In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm. Rated high severity (CVSS

CVE-2021-45484 HIGH
7.5 Dec 25

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG. Rated high severity

Share

CVE-2021-45487 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy