CVE-2007-6150
- State
- Published
- Severity
- Not scored
- Published
- Nov 30, 2007
- Updated
- Aug 7, 2024
- Reserved
- Nov 27, 2007
Description
The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of those values.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 26642vdb-entry
- FreeBSD-SA-07:09vendor-advisory
- 1019022vdb-entry
- freebsd-sysdevrandom-information-disclosure(38764)vdb-entry
- 27879third-party-advisory
- 39600vdb-entry
- ADV-2007-4053vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.