PT-2020-5987
CVE-2020-16166
·
تاريخ النشر
2020-07-29
·
تاريخ التحديث
2022-04-26
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.7.11
Description
The issue is related to the Linux kernel's random number generator (RNG) and is caused by a lack of protection for internal data. This allows remote attackers to make observations that help obtain sensitive information about the internal state of the network RNG. The affected files are drivers/char/random.c and kernel/time/timer.c.
Recommendations
For Linux kernel versions through 5.7.11, update to a version later than 5.7.11 to resolve the issue.
As a temporary workaround, consider restricting access to the affected files, drivers/char/random.c and kernel/time/timer.c, until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾