CVE-2024-10603CWE-340

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in…

Medium · published January 30, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00268 · 17.9th percentile
Weakness
CWE-340 · Generation of Predictable Numbers or Identifiers
Published
2025-01-30T19:14Z
EPSS history
Timeline
  • 30 JAN 19:14Z
    Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in…
    cvelistv5