CVE-2024-10026 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identi…
Medium CVSS: 6.3

CVE-2024-10026

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.
Vendor
Google
Product
Gvisor
CWE
CWE-328
Yayın Tarihi
2025-01-30 20:15:32
Güncelleme
2025-07-31 18:33:50
Source Identifier
cve-coordination@google.com
KEV Date Added
-

Kategoriler

CWE-328 Gvisor MEDIUM Google 2025

Referanslar

https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2 https://github.com/google/gvisor/commit/e54bfde79278cafadedbf73c68ee10cb5982f2af https://github.com/google/gvisor/commit/f956b5ac17ae1f60a4d21999b59ba18c55f86d56 https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf