Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-devel | Dec 1, 2016 | Oct 10, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 10, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Oct 10, 2013 |
| Suse | — | Upgrade kernel-rt_trace-develUpgrade kernel-pae-baseUpgrade cluster-network-kmp-defaultUpgrade kernel-bigsmpUpgrade kernel-rt-develUpgrade btrfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-xen-baseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xen-extraUpgrade lttng-modules-kmp-rtUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-bigsmp-develUpgrade kernel-traceUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-xenUpgrade hyper-v-kmp-paeUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade hyper-v-kmp-defaultUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade ocfs2-kmp-traceUpgrade iscsitarget-kmp-rtUpgrade ext4dev-kmp-paeUpgrade drbd-kmp-rt_traceUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-trace-develUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade ocfs2-kmp-paeUpgrade cluster-network-kmp-xenUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-bigsmpUpgrade kernel-trace-extraUpgrade gfs2-kmp-paeUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-ppc64Upgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-bigsmp-baseUpgrade cluster-network-kmp-rtUpgrade xen-kmp-defaultUpgrade kernel-trace-baseUpgrade cluster-network-kmp-paeUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade kernel-ec2Upgrade kernel-paeUpgrade ext4dev-kmp-xenUpgrade cluster-network-kmp-bigsmpUpgrade ocfs2-kmp-ppc64Upgrade xen-kmp-paeUpgrade kernel-source-rtUpgrade cluster-network-kmp-ppc64Upgrade kernel-rt_traceUpgrade ocfs2-kmp-bigsmpUpgrade ext4dev-kmp-traceUpgrade lttng-modules-kmp-rt_traceUpgrade btrfs-kmp-paeUpgrade kernel-xenUpgrade sle-hae-releaseUpgrade gfs2-kmp-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade xen-kmp-traceUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-traceUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade kernel-pae-extraUpgrade kernel-ppc64-develUpgrade ofed-kmp-rt_traceUpgrade kernel-rt-baseUpgrade ofed-kmp-rtUpgrade drbd-kmp-rt | Jan 31, 2014 | Oct 10, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-237-omap4Upgrade linux-image-2.6.32-55-genericUpgrade linux-image-2.6.32-55-sparc64-smpUpgrade linux-image-2.6.32-55-preemptUpgrade linux-image-2.6.32-55-virtualUpgrade linux-image-3.8.0-38-genericUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-55-serverUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-55-ia64Upgrade linux-image-2.6.32-55-386Upgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-360-ec2Upgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-55-generic-paeUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-2.6.32-55-powerpcUpgrade linux-image-3.5.0-45-powerpc-smpUpgrade linux-image-2.6.32-55-powerpc-smpUpgrade linux-image-2.6.32-55-versatileUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-2.6.32-55-powerpc64-smpUpgrade linux-image-3.5.0-45-highbankUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-2.6.32-55-lpiaUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-2.6.32-55-sparc64Upgrade linux-image-3.5.0-45-omapUpgrade linux-image-3.5.0-45-powerpc64-smpUpgrade linux-image-3.11.0-15-generic | Nov 8, 2024 | Oct 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub