Linux Distros Unpatched Vulnerability : CVE-2024-35875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems Ubuntu Linux - x86/coco: Require seeding RNG with RDRAND on CoCo...

CVE-2024-35875

CVE-2024-35875 addresses a security concern in the Linux kernel's handling of confidential computing CoCo environments. In these setups, the virtual machine VM host is untrusted and may attempt to compromise guest VMs. A critical component for maintaining security in such environments is a reliab...

DEBIAN-CVE-2024-35875

In the Linux kernel, the following vulnerability has been resolved: x86/coco: Require seeding RNG with RDRAND on CoCo systems There are few uses of CoCo that don't rely on working cryptography and hence a working RNG. Unfortunately, the CoCo threat model means that the VM host cannot be trusted a...

PT-2021-17424

Name of the Vulnerable Software and Affected Versions rand core crate versions prior to 0.6.2 Description An issue was discovered in the rand core crate where the functions read u32 into and read u64 into mishandle certain buffer-length checks. This can cause a random number generator to be seede...

OracleVM 3.2 : openssh (OVMSA-2016-0030)

The remote OracleVM system is missing necessary patches to address critical security updates : - change default value of MaxStartups - CVE-2010-5107 John Haxby - improve RNG seeding from /dev/random 681291,708056 - make ssh1's ConnectTimeout option apply to both the TCP connection and SSH banner...