SecuritySpace - CVE-2014-7284

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2014-7284

Description: The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-7284
https://web.archive.org/web/20141002163852/http://secondlookforensics.com/ngro-linux-kernel-bug/
http://www.openwall.com/lists/oss-security/2014/10/01/19

CVE ID:	CVE-2014-7284
Description:	The net_get_random_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-7284 https://web.archive.org/web/20141002163852/http://secondlookforensics.com/ngro-linux-kernel-bug/ http://www.openwall.com/lists/oss-security/2014/10/01/19