CVE-2007-2453

Description

The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.

1.2

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.14%

Vendor Advisory ubuntu.com Vendor Advisory novell.com Vendor Advisory novell.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory ubuntu.com

Affected: n/a n/a

References

Link	Tags
http://www.ubuntu.com/usn/usn-470-1	vendor advisory
http://www.securitytracker.com/id?1018248	vdb entry
http://secunia.com/advisories/26664	third party advisory
http://www.novell.com/linux/security/advisories/2007_51_kernel.html	vendor advisory
http://www.vupen.com/english/advisories/2007/2105	vdb entry
http://www.novell.com/linux/security/advisories/2007_43_kernel.html	vendor advisory
http://www.securityfocus.com/bid/24390	vdb entry
http://www.mandriva.com/security/advisories?name=MDKSA-2007:171	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34781	vdb entry
http://www.debian.org/security/2007/dsa-1356	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:216	vendor advisory
http://secunia.com/advisories/26620	third party advisory
http://www.ubuntu.com/usn/usn-489-1	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:196	vendor advisory
http://marc.info/?l=linux-kernel&m=118128622431272&w=2	patch mailing list
http://secunia.com/advisories/25961	third party advisory
http://osvdb.org/37114	vdb entry
http://secunia.com/advisories/25596	third party advisory
https://rhn.redhat.com/errata/RHSA-2007-0376.html	vendor advisory
http://www.ubuntu.com/usn/usn-486-1	vendor advisory
http://secunia.com/advisories/26450	third party advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4
http://secunia.com/advisories/25700	third party advisory
http://marc.info/?l=linux-kernel&m=118128610219959&w=2	patch mailing list
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9960	signature vdb entry
http://secunia.com/advisories/26139	third party advisory
http://secunia.com/advisories/26133	third party advisory

Frequently Asked Questions

What is the severity of CVE-2007-2453?: CVE-2007-2453 has been scored as a low severity vulnerability.
How to fix CVE-2007-2453?: To fix CVE-2007-2453, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-2453 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2007-2453 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.