Information Disclosure

2020-09-2410:58:54

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.3%

JSON

linux is vulnerable to information disclosure. The vulnerability exists as through the internal state of the network RNG via drivers/char/random.c and kernel/time/timer.c.

CPENameOperatorVersion
linux-aws:bioniceq4.15.0.1007.7
linux-gcp:xenialeq4.15.0.1083.84
linux-gcp:xenialeq4.15.0.1084.85
linux-gcp:xenialeq4.15.0.1080.82
linux-azure:focaleq5.4.0.1022.21
linux-azure:focaleq5.4.0.1025.24
linux-azure:focaleq5.4.0.1026.25
linux-azure:focaleq5.4.0.1010.11
linux-aws-hwe:xenialeq4.15.0.1083.79
linux-aws-hwe:xenialeq4.15.0.1079.76

Name	Operator	Version
linux-aws:bionic	eq	4.15.0.1007.7
linux-gcp:xenial	eq	4.15.0.1083.84
linux-gcp:xenial	eq	4.15.0.1084.85
linux-gcp:xenial	eq	4.15.0.1080.82
linux-azure:focal	eq	5.4.0.1022.21
linux-azure:focal	eq	5.4.0.1025.24
linux-azure:focal	eq	5.4.0.1026.25
linux-azure:focal	eq	5.4.0.1010.11
linux-aws-hwe:xenial	eq	4.15.0.1083.79
linux-aws-hwe:xenial	eq	4.15.0.1079.76