CVE-2008-5162

Published: Nov 26, 2008Modified: Apr 23, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function's return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.

Affected (30)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	From 6.4 to 7.0
Freebsd Freebsd	Version 6.3
Freebsd Freebsd	Version 6.3 p1
Freebsd Freebsd	Version 6.3 p2
Freebsd Freebsd	Version 6.3 p3
Freebsd Freebsd	Version 6.3 p4
Freebsd Freebsd	Version 6.3 p5
Freebsd Freebsd	Version 7.0
Freebsd Freebsd	Version 7.0 p1
Freebsd Freebsd	Version 7.0 p3
Freebsd Freebsd	Version 7.0 p4
Freebsd Freebsd	Version 7.0 p5
Freebsd Freebsd	Version 7.1
Freebsd Freebsd	Version 7.1 p10
Freebsd Freebsd	Version 7.1 p12
Freebsd Freebsd	Version 7.1 p13
Freebsd Freebsd	Version 7.1 p14
Freebsd Freebsd	Version 7.1 p15
Freebsd Freebsd	Version 7.1 p16
Freebsd Freebsd	Version 7.1 p1
Freebsd Freebsd	Version 7.1 p2
Freebsd Freebsd	Version 7.1 p3
Freebsd Freebsd	Version 7.1 p4
Freebsd Freebsd	Version 7.1 p5
Freebsd Freebsd	Version 7.1 p6
Freebsd Freebsd	Version 7.1 p7
Freebsd Freebsd	Version 7.1 p8
Freebsd Freebsd	Version 7.1 p9
Freebsd Freebsd	Version 7.1 rc1
Freebsd Freebsd	Version 7.1 rc2