CVE Vulnerabilities

CVE-2008-1146

Published: Mar 04, 2008 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka Algorithm X3), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSDs modification of BIND.

Affected Software

Name Vendor Start Version End Version
Mac_os_x Apple 10.0 (including) 10.0 (including)
Mac_os_x Apple 10.0.1 (including) 10.0.1 (including)
Mac_os_x Apple 10.0.2 (including) 10.0.2 (including)
Mac_os_x Apple 10.0.3 (including) 10.0.3 (including)
Mac_os_x Apple 10.0.4 (including) 10.0.4 (including)
Mac_os_x Apple 10.1 (including) 10.1 (including)
Mac_os_x Apple 10.1.1 (including) 10.1.1 (including)
Mac_os_x Apple 10.1.2 (including) 10.1.2 (including)
Mac_os_x Apple 10.1.3 (including) 10.1.3 (including)
Mac_os_x Apple 10.1.4 (including) 10.1.4 (including)
Mac_os_x Apple 10.1.5 (including) 10.1.5 (including)
Mac_os_x Apple 10.2 (including) 10.2 (including)
Mac_os_x Apple 10.2.1 (including) 10.2.1 (including)
Mac_os_x Apple 10.2.2 (including) 10.2.2 (including)
Mac_os_x Apple 10.2.3 (including) 10.2.3 (including)
Mac_os_x Apple 10.2.4 (including) 10.2.4 (including)
Mac_os_x Apple 10.2.5 (including) 10.2.5 (including)
Mac_os_x Apple 10.2.6 (including) 10.2.6 (including)
Mac_os_x Apple 10.2.7 (including) 10.2.7 (including)
Mac_os_x Apple 10.2.8 (including) 10.2.8 (including)
Mac_os_x Apple 10.3 (including) 10.3 (including)
Mac_os_x Apple 10.3.1 (including) 10.3.1 (including)
Mac_os_x Apple 10.3.2 (including) 10.3.2 (including)
Mac_os_x Apple 10.3.3 (including) 10.3.3 (including)
Mac_os_x Apple 10.3.4 (including) 10.3.4 (including)
Mac_os_x Apple 10.3.5 (including) 10.3.5 (including)
Mac_os_x Apple 10.3.6 (including) 10.3.6 (including)
Mac_os_x Apple 10.3.7 (including) 10.3.7 (including)
Mac_os_x Apple 10.3.8 (including) 10.3.8 (including)
Mac_os_x Apple 10.3.9 (including) 10.3.9 (including)
Mac_os_x Apple 10.4 (including) 10.4 (including)
Mac_os_x Apple 10.4.1 (including) 10.4.1 (including)
Mac_os_x Apple 10.4.2 (including) 10.4.2 (including)
Mac_os_x Apple 10.4.3 (including) 10.4.3 (including)
Mac_os_x Apple 10.4.4 (including) 10.4.4 (including)
Mac_os_x Apple 10.4.5 (including) 10.4.5 (including)
Mac_os_x Apple 10.4.6 (including) 10.4.6 (including)
Mac_os_x Apple 10.4.7 (including) 10.4.7 (including)
Mac_os_x Apple 10.4.8 (including) 10.4.8 (including)
Mac_os_x Apple 10.4.9 (including) 10.4.9 (including)
Mac_os_x Apple 10.4.10 (including) 10.4.10 (including)
Mac_os_x Apple 10.4.11 (including) 10.4.11 (including)
Mac_os_x Apple 10.5 (including) 10.5 (including)
Mac_os_x Apple 10.5.1 (including) 10.5.1 (including)
Mac_os_x_server Apple 10.0 (including) 10.0 (including)
Mac_os_x_server Apple 10.1 (including) 10.1 (including)
Mac_os_x_server Apple 10.1.1 (including) 10.1.1 (including)
Mac_os_x_server Apple 10.1.2 (including) 10.1.2 (including)
Mac_os_x_server Apple 10.1.3 (including) 10.1.3 (including)
Mac_os_x_server Apple 10.1.4 (including) 10.1.4 (including)
Mac_os_x_server Apple 10.1.5 (including) 10.1.5 (including)
Mac_os_x_server Apple 10.2 (including) 10.2 (including)
Mac_os_x_server Apple 10.2.1 (including) 10.2.1 (including)
Mac_os_x_server Apple 10.2.2 (including) 10.2.2 (including)
Mac_os_x_server Apple 10.2.3 (including) 10.2.3 (including)
Mac_os_x_server Apple 10.2.4 (including) 10.2.4 (including)
Mac_os_x_server Apple 10.2.5 (including) 10.2.5 (including)
Mac_os_x_server Apple 10.2.6 (including) 10.2.6 (including)
Mac_os_x_server Apple 10.2.7 (including) 10.2.7 (including)
Mac_os_x_server Apple 10.2.8 (including) 10.2.8 (including)
Mac_os_x_server Apple 10.3 (including) 10.3 (including)
Mac_os_x_server Apple 10.3.1 (including) 10.3.1 (including)
Mac_os_x_server Apple 10.3.2 (including) 10.3.2 (including)
Mac_os_x_server Apple 10.3.3 (including) 10.3.3 (including)
Mac_os_x_server Apple 10.3.4 (including) 10.3.4 (including)
Mac_os_x_server Apple 10.3.5 (including) 10.3.5 (including)
Mac_os_x_server Apple 10.3.6 (including) 10.3.6 (including)
Mac_os_x_server Apple 10.3.7 (including) 10.3.7 (including)
Mac_os_x_server Apple 10.3.8 (including) 10.3.8 (including)
Mac_os_x_server Apple 10.3.9 (including) 10.3.9 (including)
Mac_os_x_server Apple 10.4 (including) 10.4 (including)
Mac_os_x_server Apple 10.4.1 (including) 10.4.1 (including)
Mac_os_x_server Apple 10.4.2 (including) 10.4.2 (including)
Mac_os_x_server Apple 10.4.3 (including) 10.4.3 (including)
Mac_os_x_server Apple 10.4.4 (including) 10.4.4 (including)
Mac_os_x_server Apple 10.4.5 (including) 10.4.5 (including)
Mac_os_x_server Apple 10.4.6 (including) 10.4.6 (including)
Mac_os_x_server Apple 10.4.7 (including) 10.4.7 (including)
Mac_os_x_server Apple 10.4.8 (including) 10.4.8 (including)
Mac_os_x_server Apple 10.4.9 (including) 10.4.9 (including)
Mac_os_x_server Apple 10.4.10 (including) 10.4.10 (including)
Mac_os_x_server Apple 10.4.11 (including) 10.4.11 (including)
Mac_os_x_server Apple 10.5 (including) 10.5 (including)
Dragonflybsd Dragonflybsd 1.0 (including) 1.0 (including)
Dragonflybsd Dragonflybsd 1.1 (including) 1.1 (including)
Dragonflybsd Dragonflybsd 1.2 (including) 1.2 (including)
Dragonflybsd Dragonflybsd 1.10.1 (including) 1.10.1 (including)
Freebsd Freebsd 4.4 (including) 4.4 (including)
Freebsd Freebsd 4.4-release_p42 (including) 4.4-release_p42 (including)
Freebsd Freebsd 4.4-releng (including) 4.4-releng (including)
Freebsd Freebsd 4.4-stable (including) 4.4-stable (including)
Freebsd Freebsd 4.5 (including) 4.5 (including)
Freebsd Freebsd 4.5-release (including) 4.5-release (including)
Freebsd Freebsd 4.5-release_p32 (including) 4.5-release_p32 (including)
Freebsd Freebsd 4.5-releng (including) 4.5-releng (including)
Freebsd Freebsd 4.5-stable (including) 4.5-stable (including)
Freebsd Freebsd 4.6 (including) 4.6 (including)
Freebsd Freebsd 4.6-release (including) 4.6-release (including)
Freebsd Freebsd 4.6-release_p20 (including) 4.6-release_p20 (including)
Freebsd Freebsd 4.6-releng (including) 4.6-releng (including)
Freebsd Freebsd 4.6-stable (including) 4.6-stable (including)
Freebsd Freebsd 4.6.2 (including) 4.6.2 (including)
Freebsd Freebsd 4.7 (including) 4.7 (including)
Freebsd Freebsd 4.7-release (including) 4.7-release (including)
Freebsd Freebsd 4.7-release_p17 (including) 4.7-release_p17 (including)
Freebsd Freebsd 4.7-releng (including) 4.7-releng (including)
Freebsd Freebsd 4.7-stable (including) 4.7-stable (including)
Freebsd Freebsd 4.8 (including) 4.8 (including)
Freebsd Freebsd 4.8-release_p7 (including) 4.8-release_p7 (including)
Freebsd Freebsd 4.8-releng (including) 4.8-releng (including)
Freebsd Freebsd 4.8_prerelease (including) 4.8_prerelease (including)
Freebsd Freebsd 4.9 (including) 4.9 (including)
Freebsd Freebsd 4.9-releng (including) 4.9-releng (including)
Freebsd Freebsd 4.9_prerelease (including) 4.9_prerelease (including)
Freebsd Freebsd 4.10 (including) 4.10 (including)
Freebsd Freebsd 4.10-release (including) 4.10-release (including)
Freebsd Freebsd 4.10-release_p8 (including) 4.10-release_p8 (including)
Freebsd Freebsd 4.10-releng (including) 4.10-releng (including)
Freebsd Freebsd 4.10_prerelease (including) 4.10_prerelease (including)
Freebsd Freebsd 4.11-release_p3 (including) 4.11-release_p3 (including)
Freebsd Freebsd 4.11-releng (including) 4.11-releng (including)
Freebsd Freebsd 4.11-stable (including) 4.11-stable (including)
Freebsd Freebsd 4.11_p20_release (including) 4.11_p20_release (including)
Freebsd Freebsd 4.11_release (including) 4.11_release (including)
Freebsd Freebsd 5.0 (including) 5.0 (including)
Freebsd Freebsd 5.0-alpha (including) 5.0-alpha (including)
Freebsd Freebsd 5.0-release_p14 (including) 5.0-release_p14 (including)
Freebsd Freebsd 5.0-releng (including) 5.0-releng (including)
Freebsd Freebsd 5.1 (including) 5.1 (including)
Freebsd Freebsd 5.1-alpha (including) 5.1-alpha (including)
Freebsd Freebsd 5.1-release (including) 5.1-release (including)
Freebsd Freebsd 5.1-release_p5 (including) 5.1-release_p5 (including)
Freebsd Freebsd 5.1-releng (including) 5.1-releng (including)
Freebsd Freebsd 5.2 (including) 5.2 (including)
Freebsd Freebsd 5.2.1-release (including) 5.2.1-release (including)
Freebsd Freebsd 5.2.1-releng (including) 5.2.1-releng (including)
Freebsd Freebsd 5.3 (including) 5.3 (including)
Freebsd Freebsd 5.3-release (including) 5.3-release (including)
Freebsd Freebsd 5.3-releng (including) 5.3-releng (including)
Freebsd Freebsd 5.3-stable (including) 5.3-stable (including)
Freebsd Freebsd 5.4-release (including) 5.4-release (including)
Freebsd Freebsd 5.4-releng (including) 5.4-releng (including)
Freebsd Freebsd 5.4-stable (including) 5.4-stable (including)
Freebsd Freebsd 5.5_release (including) 5.5_release (including)
Freebsd Freebsd 5.5_stable (including) 5.5_stable (including)
Freebsd Freebsd 6.0 (including) 6.0 (including)
Freebsd Freebsd 6.0-release (including) 6.0-release (including)
Freebsd Freebsd 6.0-stable (including) 6.0-stable (including)
Freebsd Freebsd 6.0_p5_release (including) 6.0_p5_release (including)
Freebsd Freebsd 6.1 (including) 6.1 (including)
Freebsd Freebsd 6.1-release (including) 6.1-release (including)
Freebsd Freebsd 6.1-release_p10 (including) 6.1-release_p10 (including)
Freebsd Freebsd 6.1-stable (including) 6.1-stable (including)
Freebsd Freebsd 6.2 (including) 6.2 (including)
Freebsd Freebsd 6.2-stable (including) 6.2-stable (including)
Freebsd Freebsd 6.2_releng (including) 6.2_releng (including)
Freebsd Freebsd 6.3 (including) 6.3 (including)
Freebsd Freebsd 6.3_releng (including) 6.3_releng (including)
Freebsd Freebsd 7.0-pre-release (including) 7.0-pre-release (including)
Freebsd Freebsd 7.0_beta4 (including) 7.0_beta4 (including)
Freebsd Freebsd 7.0_releng (including) 7.0_releng (including)
Netbsd Netbsd 1.6.2 (including) 1.6.2 (including)
Netbsd Netbsd 2.0 (including) 2.0 (including)
Netbsd Netbsd 2.0.1 (including) 2.0.1 (including)
Netbsd Netbsd 2.0.2 (including) 2.0.2 (including)
Netbsd Netbsd 2.0.3 (including) 2.0.3 (including)
Netbsd Netbsd 2.0.4 (including) 2.0.4 (including)
Netbsd Netbsd 2.1 (including) 2.1 (including)
Netbsd Netbsd 2.1.1 (including) 2.1.1 (including)
Netbsd Netbsd 3.0.1 (including) 3.0.1 (including)
Netbsd Netbsd 3.0.2 (including) 3.0.2 (including)
Netbsd Netbsd 3.1 (including) 3.1 (including)
Netbsd Netbsd 3.1-rc1 (including) 3.1-rc1 (including)
Netbsd Netbsd 3.1-rc3 (including) 3.1-rc3 (including)
Netbsd Netbsd 4.0 (including) 4.0 (including)
Netbsd Netbsd 4.0-beta (including) 4.0-beta (including)
Netbsd Netbsd 4.0-beta2 (including) 4.0-beta2 (including)
Openbsd Openbsd 2.6 (including) 2.6 (including)
Openbsd Openbsd 2.7 (including) 2.7 (including)
Openbsd Openbsd 2.8 (including) 2.8 (including)
Openbsd Openbsd 2.9 (including) 2.9 (including)
Openbsd Openbsd 3.0 (including) 3.0 (including)
Openbsd Openbsd 3.1 (including) 3.1 (including)
Openbsd Openbsd 3.2 (including) 3.2 (including)
Openbsd Openbsd 3.3 (including) 3.3 (including)
Openbsd Openbsd 3.4 (including) 3.4 (including)
Openbsd Openbsd 3.5 (including) 3.5 (including)
Openbsd Openbsd 3.6 (including) 3.6 (including)
Openbsd Openbsd 3.7 (including) 3.7 (including)
Openbsd Openbsd 3.8 (including) 3.8 (including)
Openbsd Openbsd 3.9 (including) 3.9 (including)
Openbsd Openbsd 4.0 (including) 4.0 (including)
Openbsd Openbsd 4.1 (including) 4.1 (including)
Openbsd Openbsd 4.2 (including) 4.2 (including)

References