7.5

CVE-2008-5659

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Classpath Version <= 0.97.2
Gnu ≫ Classpath Version 0.6
Gnu ≫ Classpath Version 0.7
Gnu ≫ Classpath Version 0.8
Gnu ≫ Classpath Version 0.9
Gnu ≫ Classpath Version 0.10
Gnu ≫ Classpath Version 0.11
Gnu ≫ Classpath Version 0.12
Gnu ≫ Classpath Version 0.13
Gnu ≫ Classpath Version 0.14
Gnu ≫ Classpath Version 0.15
Gnu ≫ Classpath Version 0.16
Gnu ≫ Classpath Version 0.17
Gnu ≫ Classpath Version 0.18
Gnu ≫ Classpath Version 0.19
Gnu ≫ Classpath Version 0.20
Gnu ≫ Classpath Version 0.90
Gnu ≫ Classpath Version 0.91
Gnu ≫ Classpath Version 0.92
Gnu ≫ Classpath Version 0.93
Gnu ≫ Classpath Version 0.95
Gnu ≫ Classpath Version 0.96
Gnu ≫ Classpath Version 0.96.1
Gnu ≫ Classpath Version 0.97
Gnu ≫ Classpath Version 0.97.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.35% 0.871
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38417
http://www.openwall.com/lists/oss-security/2008/12/06/2
https://exchange.xforce.ibmcloud.com/vulnerabilities/47574