7.5

CVE-2008-5659

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Classpath Version <= 0.97.2
Gnu ≫ Classpath Version0.6
Gnu ≫ Classpath Version0.7
Gnu ≫ Classpath Version0.8
Gnu ≫ Classpath Version0.9
Gnu ≫ Classpath Version0.10
Gnu ≫ Classpath Version0.11
Gnu ≫ Classpath Version0.12
Gnu ≫ Classpath Version0.13
Gnu ≫ Classpath Version0.14
Gnu ≫ Classpath Version0.15
Gnu ≫ Classpath Version0.16
Gnu ≫ Classpath Version0.17
Gnu ≫ Classpath Version0.18
Gnu ≫ Classpath Version0.19
Gnu ≫ Classpath Version0.20
Gnu ≫ Classpath Version0.90
Gnu ≫ Classpath Version0.91
Gnu ≫ Classpath Version0.92
Gnu ≫ Classpath Version0.93
Gnu ≫ Classpath Version0.95
Gnu ≫ Classpath Version0.96
Gnu ≫ Classpath Version0.96.1
Gnu ≫ Classpath Version0.97
Gnu ≫ Classpath Version0.97.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.75% 0.818
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P