Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux kernel 信息泄露漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 特定Intel处理器上使用的Linux kernel 3.13.x版本和3.14.5之前3.14.x版本的net/core/utils.c文件中的net_get_random_once实现过程中存在安全漏洞，该漏洞源于程序初始化随机数种子时没有执行既定的slow-path操作。远程攻击者可借助TCP序列数、TCP和UDP端口数和IP ID值利用该
CVSS Information
N/A
Vulnerability Type
N/A