CVE-2018-1108
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.9epss 1.8%
probabilidad de explotación
1.8%top 24% de las CVE
explotación observada
noninguna fuente lo reporta
kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Productos afectados
kernel · driversReferencias
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1108https://lists.debian.org/debian-lts-announce/2022/07/msg00000.htmlhttps://usn.ubuntu.com/3718-1/https://usn.ubuntu.com/3718-2/https://usn.ubuntu.com/3752-1/https://usn.ubuntu.com/3752-2/https://usn.ubuntu.com/3752-3/https://www.debian.org/security/2018/dsa-4188http://www.securityfocus.com/bid/104055