CVE-2021-45488

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

CVE-2021-45484

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

CVE-2021-45487

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

Information disclosure

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

Code injection

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

Code injection

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

Code injection

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

CVE-2021-45484

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

CVE-2021-45484

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...

CVE-2021-45484

Constrained to the NetBSD IPv6 stack: CVE-2021-45484 involves a weak cryptographic PRNG used in the IPv6 fragment ID generation algorithm in NetBSD up to version 9.2. The vulnerability is tied to how fragment IDs are generated, potentially impacting confidentiality, as noted in public advisories....

CVE-2021-45487

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

CVE-2021-45487

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures...

CVE-2021-45487

The CVE-2021-45487 entry relates to NetBSD up to version 9.2, where the IPv4 ID generation algorithm does not use appropriate cryptographic measures. This is a flaw in the IP ID randomization/selection method within NetBSD’s IP stack that can enable an attacker to analyze IP traffic and potential...

CVE-2021-45488

The CVE-2021-45488 issue affects NetBSD up to 9.2, involving an information leak in the TCP ISN (ISS) generation algorithm within the IP/TCP stack. The root cause is an information disclosure flaw in how ISNs are generated, enabling partial exposure of sensitive data. Publicly documented details ...

CVE-2021-45488

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

CVE-2021-45488

In NetBSD through 9.2, there is an information leak in the TCP ISN ISS generation algorithm...

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

CVE-2021-45489

CVE-2021-45489 refers to NetBSD up to 9.2 where the IPv6 Flow Label generation uses a weak cryptographic PRNG. Affected: NetBSD 9.2 and earlier IP stack behavior related to Flow Label generation. Consequence: potential information leakage or traffic-related exposure described by multiple sources;...