CVE-2007-2453: Low severity Linux Linux kernel vulnerability
Published Jun 11, 2007
·Updated
The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.
Affected Software
252 affected components
Linux Linux kernel=2.6.11-rc3
Linux Linux kernel=2.6.20.6
Linux Linux kernel=2.6.4-rc3
Linux Linux kernel=2.6.17-rc6
Linux Linux kernel=2.6.20.9
Linux Linux kernel=2.6.18-rc3
Linux Linux kernel=2.6.11
Linux Linux kernel=2.6.16.16
Linux Linux kernel=2.6.17.12
Linux Linux kernel=2.6.16.39
Linux Linux kernel=2.6.21
Linux Linux kernel=2.6.21-git3
Linux Linux kernel=2.6.16.9
Linux Linux kernel=2.6.12-rc1
Linux Linux kernel=2.6.12-rc4
Linux Linux kernel=2.6.17.9
Linux Linux kernel=2.6.12.12
Linux Linux kernel=2.6.19-rc4
Linux Linux kernel=2.6.14-rc2
Linux Linux kernel=2.6.4-rc1
Linux Linux kernel=2.6.11.2
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.15.3
Linux Linux kernel=2.6.21-git5
Linux Linux kernel=2.6.11.10
Linux Linux kernel=2.6.10-rc3
Linux Linux kernel=2.6.13-rc5
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.21-git4
Linux Linux kernel=2.6.16.6
Linux Linux kernel=2.6.16.8
Linux Linux kernel=2.6.16-rc6
Linux Linux kernel=2.6.20.13
Linux Linux kernel=2.6.7-rc3
Linux Linux kernel=2.6.14.7
Linux Linux kernel=2.6.18-rc2
Linux Linux kernel=2.6.16-rc1
Linux Linux kernel=2.6.3-rc2
Linux Linux kernel=2.6.13
Linux Linux kernel=2.6.17.2
Linux Linux kernel=2.6.15-rc4
Linux Linux kernel=2.6.13.3
Linux Linux kernel=2.6.11.8
Linux Linux kernel=2.6.18-rc5
Linux Linux kernel=2.6.16.34
Linux Linux kernel=2.6.18-rc4
Linux Linux kernel=2.6.11_rc1_bk6
Linux Linux kernel=2.6.17.8
Linux Linux kernel=2.6.14.4
Linux Linux kernel=2.6.14
Linux Linux kernel=2.6.17.4
Linux Linux kernel=2.6.16.18
Linux Linux kernel=2.6.17.14
Linux Linux kernel=2.6.10
Linux Linux kernel=2.6.13-rc1
Linux Linux kernel=2.6.14.3
Linux Linux kernel=2.6.13-rc6
Linux Linux kernel=2.6.18.3
Linux Linux kernel=2.6.16.37
Linux Linux kernel=2.6.11.6
Linux Linux kernel=2.6.11.11
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.16.13
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.13-rc7
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.9-rc1
Linux Linux kernel=2.6.16.4
Linux Linux kernel=2.6.17.3
Linux Linux kernel=2.6.20.5
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.16.15
Linux Linux kernel=2.6_test9_cvs
Linux Linux kernel=2.6.13-rc2
Linux Linux kernel=2.6.15.6
Linux Linux kernel=2.6.15.1
Linux Linux kernel=2.6.11.5
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.9-rc3
Linux Linux kernel=2.6.19.3
Linux Linux kernel=2.6.15-rc5
Linux Linux kernel=2.6.19.1
Linux Linux kernel=2.6.18.4
Linux Linux kernel=2.6.16.1
Linux Linux kernel=2.6.18.1
Linux Linux kernel=2.6.8-rc4
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.6-rc3
Linux Linux kernel=2.6.14.5
Linux Linux kernel=2.6.13.2
Linux Linux kernel=2.6.12-rc5
Linux Linux kernel=2.6.1-rc3
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.17.5
Linux Linux kernel=2.6.14-rc3
Linux Linux kernel=2.6.2-rc3
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.18.5
Linux Linux kernel=2.6.4-rc2
Linux Linux kernel=2.6.21.1
Linux Linux kernel=2.6.16.32
Linux Linux kernel=2.6.13.5
Linux Linux kernel=2.6.17
Linux Linux kernel=2.6.12-rc2
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.19.2
Linux Linux kernel=2.6.11-rc4
Linux Linux kernel=2.6.16.11
Linux Linux kernel=2.6.21-git2
Linux Linux kernel=2.6.16.14
Linux Linux kernel=2.6.20.12
Linux Linux kernel=2.6.16.25
Linux Linux kernel=2.6.15-rc3
Linux Linux kernel=2.6.16.21
Linux Linux kernel=2.6.16.33
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.16.28
Linux Linux kernel=2.6.17.10
Linux Linux kernel=2.6.3-rc3
Linux Linux kernel=2.6.15.11
Linux Linux kernel=2.6.14.1
Linux Linux kernel=2.6.19-rc1
Linux Linux kernel=2.6.16.23
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.16-rc5
Linux Linux kernel=2.6.12.5
Linux Linux kernel=2.6.15.7
Linux Linux kernel=2.6.20
Linux Linux kernel=2.6.7-rc2
Linux Linux kernel=2.6.16.3
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.17-rc3
Linux Linux kernel=2.6.12-rc3
Linux Linux kernel=2.6.15-rc2
Linux Linux kernel=2.6.16.36
Linux Linux kernel=2.6.14.6
Linux Linux kernel=2.6.12.1
Linux Linux kernel=2.6.11.9
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6.17.1
Linux Linux kernel=2.6.20.8
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.2-rc1
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.16-rc4
Linux Linux kernel=2.6.5-rc1
Linux Linux kernel=2.6.21-git7
Linux Linux kernel=2.6.13.4
Linux Linux kernel=2.6.17-rc1
Linux Linux kernel=2.6.17-rc2
Linux Linux kernel=2.6.12.2
Linux Linux kernel=2.6.16.31
Linux Linux kernel=2.6.16.26
Linux Linux kernel=2.6.11-rc1
Linux Linux kernel=2.6.18.2
Linux Linux kernel=2.6.16.29
Linux Linux kernel=2.6.14-rc1
Linux Linux kernel=2.6.6-rc2
Linux Linux kernel=2.6.20.11
Linux Linux kernel=2.6.9-rc2
Linux Linux kernel=2.6.19
Linux Linux kernel=2.6.20.3
Linux Linux kernel=2.6.16
Linux Linux kernel=2.6.21.3
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.15.2
Linux Linux kernel=2.6.16.22
Linux Linux kernel=2.6.16.40
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.10-rc1
Linux Linux kernel=2.6.17.11
Linux Linux kernel=2.6.16.10
Linux Linux kernel=2.6.12.4
Linux Linux kernel=2.6.16.41
Linux Linux kernel=2.6.11.3
Linux Linux kernel=2.6.20.10
Linux Linux kernel=2.6.16.24
Linux Linux kernel=2.6.9-rc4
Linux Linux kernel=2.6.12.3
Linux Linux kernel=2.6.13-rc4
Linux Linux kernel=2.6.16_rc7
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.11-rc2
Linux Linux kernel=2.6.16.30
Linux Linux kernel=2.6.21.2
Linux Linux kernel=2.6.15.4
Linux Linux kernel=2.6.3-rc4
Linux Linux kernel=2.6.16.38
Linux Linux kernel=2.6.16.17
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.21-git1
Linux Linux kernel=2.6.20.2
Linux Linux kernel=2.6.16.12
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.16.27
Linux Linux kernel=2.6.18-rc7
Linux Linux kernel=2.6.12.6
Linux Linux kernel=2.6.17.7
Linux Linux kernel=2.6.20.1
Linux Linux kernel=2.6.11.7
Linux Linux kernel=2.6.5-rc2
Linux Linux kernel=2.6.16.2
Linux Linux kernel=2.6.18.6
Linux Linux kernel=2.6.15
Linux Linux kernel=2.6.12.22
Linux Linux kernel=2.6.15-rc6
Linux Linux kernel=2.6.16.35
Linux Linux kernel=2.6.15-rc1
Linux Linux kernel=2.6.16-rc3
Linux Linux kernel=2.6.18-rc6
Linux Linux kernel=2.6.14.2
Linux Linux kernel=2.6.14-rc4
Linux Linux kernel=2.6.18
Linux Linux kernel=2.6.19-rc2
Linux Linux kernel=2.6.20.4
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.15-rc7
Linux Linux kernel=2.6.17.6
Linux Linux kernel=2.6.5-rc3
Linux Linux kernel=2.6.14-rc5
Linux Linux kernel=2.6.16.7
Linux Linux kernel=2.6.17.13
Linux Linux kernel=2.6.2-rc2
Linux Linux kernel=2.6.8.1
Linux Linux kernel=2.6.12-rc6
Linux Linux kernel=2.6.13-rc3
Linux Linux kernel=2.6.19-rc3
Linux Linux kernel=2.6.20.14
Linux Linux kernel=2.6.17-rc4
Linux Linux kernel=2.6.11-rc5
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.3-rc1
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.20.7
Linux Linux kernel=2.6.16.5
Linux Linux kernel=2.6.11.4
Linux Linux kernel=2.6.16.19
Linux Linux kernel=2.6.11.12
Linux Linux kernel=2.6.16.20
Linux Linux kernel=2.6.15.5
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.11.1
Linux Linux kernel=2.6.16-rc2
Linux Linux kernel=2.6.18-rc1
Linux Linux kernel=2.6.21-git6
Linux Linux kernel=2.6.9
Linux Linux kernel=2.6.13.1
Linux Linux kernel=2.6.17-rc5
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.12
Remediation
Patch Available
Patch Available
Event History
Jun 11, 2007
CVE Published
11:30 PM
Jun 12, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2453?
CVE-2007-2453 has a moderate severity level due to its potential to affect the randomness of the generated numbers in the Linux kernel.
2
How do I fix CVE-2007-2453?
To address CVE-2007-2453, you should upgrade the Linux kernel to version 2.6.20.13 or 2.6.21.4 or later.
3
What versions of the Linux kernel are affected by CVE-2007-2453?
CVE-2007-2453 affects multiple versions of the Linux kernel, specifically those prior to 2.6.20.13 and 2.6.21.4.
4
What types of systems are vulnerable to CVE-2007-2453?
Systems running vulnerable versions of the Linux kernel, particularly older installations, are at risk of CVE-2007-2453.
5
Is there a workaround for CVE-2007-2453?
While upgrading is the best solution, you may reduce risk by ensuring sufficient entropy is available for random number generation temporarily.