CVE-2024-10604: Identifiable Header Values In Fuchsia Leading To Tracking of The User
Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10604?
CVE-2024-10604 is classified as a moderate severity vulnerability due to the potential for network protocol header fields to be guessed.
How do I fix CVE-2024-10604?
To address CVE-2024-10604, users should update their Google Fuchsia installations to the latest available patch that mitigates the vulnerability.
What components are affected by CVE-2024-10604?
CVE-2024-10604 affects the algorithms used for populating TCP and UDP source ports, TCP ISN, TCP timestamps, and IPv4/IPv6 fragment IDs in Google Fuchsia.
What impact does CVE-2024-10604 have on network security?
CVE-2024-10604 could allow an attacker to predict certain network parameter values, potentially leading to exploitation of network communication protocols.
Is there a workaround for CVE-2024-10604?
Currently, there are no known workarounds for CVE-2024-10604 other than applying the security update from Google Fuchsia.