CVE-2014-7284

The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the…

published October 13, 2014

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03751 · 89.8th percentile
Published
2014-10-13T10:00Z
EPSS history
Timeline
  • 13 OCT 10:00Z
    The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the…
    cvelistv5