Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-10638
HistoryJul 05, 2019 - 11:15 p.m.

Design/Logic Flaw

2019-07-0523:15:00
PRIOn knowledge base
www.prio-n.com
7

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.

CPENameOperatorVersion
linux_kernellt5.1.7

References