CVE-2007-2453

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2)…

published June 11, 2007

CVSS
—
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.6th percentile
Published
2007-06-11T23:00Z
EPSS history
Timeline
  • 11 JUN 23:00Z
    The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2)…
    cvelistv5