Inon Kaplan

**Name of the Vulnerable Software and Affected Versions** gVisor (affected versions not specified) **Description** A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gVisor (affected versions not specified) **Description** The issue concerns weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor. This allowed an external attacker to predict these values in certain circumstances. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fuchsia (affected versions not specified) **Description** The issue concerns vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields. Specifically, the vulnerabilities affect the TCP Initial Sequence Number (ISN), TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID. These vulnerabilities allow for the values to be guessed under certain circumstances. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.