7.5

CVE-2008-5659

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Classpath Version <= 0.97.2
Gnu ≫ Classpath Version0.6
Gnu ≫ Classpath Version0.7
Gnu ≫ Classpath Version0.8
Gnu ≫ Classpath Version0.9
Gnu ≫ Classpath Version0.10
Gnu ≫ Classpath Version0.11
Gnu ≫ Classpath Version0.12
Gnu ≫ Classpath Version0.13
Gnu ≫ Classpath Version0.14
Gnu ≫ Classpath Version0.15
Gnu ≫ Classpath Version0.16
Gnu ≫ Classpath Version0.17
Gnu ≫ Classpath Version0.18
Gnu ≫ Classpath Version0.19
Gnu ≫ Classpath Version0.20
Gnu ≫ Classpath Version0.90
Gnu ≫ Classpath Version0.91
Gnu ≫ Classpath Version0.92
Gnu ≫ Classpath Version0.93
Gnu ≫ Classpath Version0.95
Gnu ≫ Classpath Version0.96
Gnu ≫ Classpath Version0.96.1
Gnu ≫ Classpath Version0.97
Gnu ≫ Classpath Version0.97.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.75% 0.818
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P