CVE-2024-10603

Katalog CVE

CVSS 5.3 · Medium EPSS 0,27%

Kerentanan Generation of Predictable Numbers or Identifiers pada google gvisor. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances.

Rincian

Terbit di NVD

30 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-340: Generation of Predictable Numbers or Identifiers

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205 patch
• https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2 patch
• https://github.com/google/gvisor/commit/cbdb2c61b1f753834cedf2ebe68cbc335dadca52 patch
• https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf exploit · mitigasi · deskripsi teknis · advisory pihak ketiga