CVE-2024-10026
Improved Seeding and Hashing In gVisor
Summary
Improved Seeding and Hashing In gVisor
Original description
The description as published by the source.
A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-10026 golang-gvisor-gvisor
- Ubuntu UBUNTU-CVE-2024-10026 golang-inet-netstack
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com
- patch github.com
- web ndss-symposium.org