CVE-2024-10604CWE-330

Identifiable Header Values In Fuchsia Leading To Tracking of The User

Medium · published January 30, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2025-01-30T19:17Z
EPSS history
Timeline
  • 30 JAN 19:17Z
    Identifiable Header Values In Fuchsia Leading To Tracking of The User
    cvelistv5