CVE-2008-3217

Related Files

Gentoo Linux Security Advisory 200804-22

Posted Aug 22, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory [UPDATE] GLSA 200804-22:03 - Amit Klein of Trusteer reported that insufficient randomness is used to calculate the TRXID values and the UDP source port numbers (CVE-2008-1637). Thomas Biege of SUSE pointed out that a prior fix to resolve this issue was incomplete, as it did not always enable the stronger random number generator for source port selection (CVE-2008-3217). Versions less than 3.1.6 are affected.

tags | advisory, udp

systems | linux, suse, gentoo

advisories | CVE-2008-1637, CVE-2008-3217

SHA-256 | 7d5cac259201a9e986b7929ca9688bd105efdfe46b13c0ddf4e960f3611835ac

Download | Favorite | View