A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka Algorithm X2), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.0 (including) | 10.0 (including) |
| Mac_os_x | Apple | 10.0.1 (including) | 10.0.1 (including) |
| Mac_os_x | Apple | 10.0.2 (including) | 10.0.2 (including) |
| Mac_os_x | Apple | 10.0.3 (including) | 10.0.3 (including) |
| Mac_os_x | Apple | 10.0.4 (including) | 10.0.4 (including) |
| Mac_os_x | Apple | 10.1 (including) | 10.1 (including) |
| Mac_os_x | Apple | 10.1.1 (including) | 10.1.1 (including) |
| Mac_os_x | Apple | 10.1.2 (including) | 10.1.2 (including) |
| Mac_os_x | Apple | 10.1.3 (including) | 10.1.3 (including) |
| Mac_os_x | Apple | 10.1.4 (including) | 10.1.4 (including) |
| Mac_os_x | Apple | 10.1.5 (including) | 10.1.5 (including) |
| Mac_os_x | Apple | 10.2 (including) | 10.2 (including) |
| Mac_os_x | Apple | 10.2.1 (including) | 10.2.1 (including) |
| Mac_os_x | Apple | 10.2.2 (including) | 10.2.2 (including) |
| Mac_os_x | Apple | 10.2.3 (including) | 10.2.3 (including) |
| Mac_os_x | Apple | 10.2.4 (including) | 10.2.4 (including) |
| Mac_os_x | Apple | 10.2.5 (including) | 10.2.5 (including) |
| Mac_os_x | Apple | 10.2.6 (including) | 10.2.6 (including) |
| Mac_os_x | Apple | 10.2.7 (including) | 10.2.7 (including) |
| Mac_os_x | Apple | 10.2.8 (including) | 10.2.8 (including) |
| Mac_os_x | Apple | 10.3 (including) | 10.3 (including) |
| Mac_os_x | Apple | 10.3.1 (including) | 10.3.1 (including) |
| Mac_os_x | Apple | 10.3.2 (including) | 10.3.2 (including) |
| Mac_os_x | Apple | 10.3.3 (including) | 10.3.3 (including) |
| Mac_os_x | Apple | 10.3.4 (including) | 10.3.4 (including) |
| Mac_os_x | Apple | 10.3.5 (including) | 10.3.5 (including) |
| Mac_os_x | Apple | 10.3.6 (including) | 10.3.6 (including) |
| Mac_os_x | Apple | 10.3.7 (including) | 10.3.7 (including) |
| Mac_os_x | Apple | 10.3.8 (including) | 10.3.8 (including) |
| Mac_os_x | Apple | 10.3.9 (including) | 10.3.9 (including) |
| Mac_os_x | Apple | 10.4 (including) | 10.4 (including) |
| Mac_os_x | Apple | 10.4.1 (including) | 10.4.1 (including) |
| Mac_os_x | Apple | 10.4.2 (including) | 10.4.2 (including) |
| Mac_os_x | Apple | 10.4.3 (including) | 10.4.3 (including) |
| Mac_os_x | Apple | 10.4.4 (including) | 10.4.4 (including) |
| Mac_os_x | Apple | 10.4.5 (including) | 10.4.5 (including) |
| Mac_os_x | Apple | 10.4.6 (including) | 10.4.6 (including) |
| Mac_os_x | Apple | 10.4.7 (including) | 10.4.7 (including) |
| Mac_os_x | Apple | 10.4.8 (including) | 10.4.8 (including) |
| Mac_os_x | Apple | 10.4.9 (including) | 10.4.9 (including) |
| Mac_os_x | Apple | 10.4.10 (including) | 10.4.10 (including) |
| Mac_os_x | Apple | 10.4.11 (including) | 10.4.11 (including) |
| Mac_os_x | Apple | 10.5 (including) | 10.5 (including) |
| Mac_os_x | Apple | 10.5.1 (including) | 10.5.1 (including) |
| Mac_os_x_server | Apple | 10.0 (including) | 10.0 (including) |
| Mac_os_x_server | Apple | 10.1 (including) | 10.1 (including) |
| Mac_os_x_server | Apple | 10.1.1 (including) | 10.1.1 (including) |
| Mac_os_x_server | Apple | 10.1.2 (including) | 10.1.2 (including) |
| Mac_os_x_server | Apple | 10.1.3 (including) | 10.1.3 (including) |
| Mac_os_x_server | Apple | 10.1.4 (including) | 10.1.4 (including) |
| Mac_os_x_server | Apple | 10.1.5 (including) | 10.1.5 (including) |
| Mac_os_x_server | Apple | 10.2 (including) | 10.2 (including) |
| Mac_os_x_server | Apple | 10.2.1 (including) | 10.2.1 (including) |
| Mac_os_x_server | Apple | 10.2.2 (including) | 10.2.2 (including) |
| Mac_os_x_server | Apple | 10.2.3 (including) | 10.2.3 (including) |
| Mac_os_x_server | Apple | 10.2.4 (including) | 10.2.4 (including) |
| Mac_os_x_server | Apple | 10.2.5 (including) | 10.2.5 (including) |
| Mac_os_x_server | Apple | 10.2.6 (including) | 10.2.6 (including) |
| Mac_os_x_server | Apple | 10.2.7 (including) | 10.2.7 (including) |
| Mac_os_x_server | Apple | 10.2.8 (including) | 10.2.8 (including) |
| Mac_os_x_server | Apple | 10.3 (including) | 10.3 (including) |
| Mac_os_x_server | Apple | 10.3.1 (including) | 10.3.1 (including) |
| Mac_os_x_server | Apple | 10.3.2 (including) | 10.3.2 (including) |
| Mac_os_x_server | Apple | 10.3.3 (including) | 10.3.3 (including) |
| Mac_os_x_server | Apple | 10.3.4 (including) | 10.3.4 (including) |
| Mac_os_x_server | Apple | 10.3.5 (including) | 10.3.5 (including) |
| Mac_os_x_server | Apple | 10.3.6 (including) | 10.3.6 (including) |
| Mac_os_x_server | Apple | 10.3.7 (including) | 10.3.7 (including) |
| Mac_os_x_server | Apple | 10.3.8 (including) | 10.3.8 (including) |
| Mac_os_x_server | Apple | 10.3.9 (including) | 10.3.9 (including) |
| Mac_os_x_server | Apple | 10.4 (including) | 10.4 (including) |
| Mac_os_x_server | Apple | 10.4.1 (including) | 10.4.1 (including) |
| Mac_os_x_server | Apple | 10.4.2 (including) | 10.4.2 (including) |
| Mac_os_x_server | Apple | 10.4.3 (including) | 10.4.3 (including) |
| Mac_os_x_server | Apple | 10.4.4 (including) | 10.4.4 (including) |
| Mac_os_x_server | Apple | 10.4.5 (including) | 10.4.5 (including) |
| Mac_os_x_server | Apple | 10.4.6 (including) | 10.4.6 (including) |
| Mac_os_x_server | Apple | 10.4.7 (including) | 10.4.7 (including) |
| Mac_os_x_server | Apple | 10.4.8 (including) | 10.4.8 (including) |
| Mac_os_x_server | Apple | 10.4.9 (including) | 10.4.9 (including) |
| Mac_os_x_server | Apple | 10.4.10 (including) | 10.4.10 (including) |
| Mac_os_x_server | Apple | 10.4.11 (including) | 10.4.11 (including) |
| Mac_os_x_server | Apple | 10.5 (including) | 10.5 (including) |
| Dragonflybsd | Dragonflybsd | 1.0 (including) | 1.0 (including) |
| Dragonflybsd | Dragonflybsd | 1.1 (including) | 1.1 (including) |
| Dragonflybsd | Dragonflybsd | 1.2 (including) | 1.2 (including) |
| Dragonflybsd | Dragonflybsd | 1.10.1 (including) | 1.10.1 (including) |
| Freebsd | Freebsd | 4.4 (including) | 4.4 (including) |
| Freebsd | Freebsd | 4.4-release_p42 (including) | 4.4-release_p42 (including) |
| Freebsd | Freebsd | 4.4-releng (including) | 4.4-releng (including) |
| Freebsd | Freebsd | 4.4-stable (including) | 4.4-stable (including) |
| Freebsd | Freebsd | 4.5 (including) | 4.5 (including) |
| Freebsd | Freebsd | 4.5-release (including) | 4.5-release (including) |
| Freebsd | Freebsd | 4.5-release_p32 (including) | 4.5-release_p32 (including) |
| Freebsd | Freebsd | 4.5-releng (including) | 4.5-releng (including) |
| Freebsd | Freebsd | 4.5-stable (including) | 4.5-stable (including) |
| Freebsd | Freebsd | 4.6 (including) | 4.6 (including) |
| Freebsd | Freebsd | 4.6-release (including) | 4.6-release (including) |
| Freebsd | Freebsd | 4.6-release_p20 (including) | 4.6-release_p20 (including) |
| Freebsd | Freebsd | 4.6-releng (including) | 4.6-releng (including) |
| Freebsd | Freebsd | 4.6-stable (including) | 4.6-stable (including) |
| Freebsd | Freebsd | 4.6.2 (including) | 4.6.2 (including) |
| Freebsd | Freebsd | 4.7 (including) | 4.7 (including) |
| Freebsd | Freebsd | 4.7-release (including) | 4.7-release (including) |
| Freebsd | Freebsd | 4.7-release_p17 (including) | 4.7-release_p17 (including) |
| Freebsd | Freebsd | 4.7-releng (including) | 4.7-releng (including) |
| Freebsd | Freebsd | 4.7-stable (including) | 4.7-stable (including) |
| Freebsd | Freebsd | 4.8 (including) | 4.8 (including) |
| Freebsd | Freebsd | 4.8-release_p7 (including) | 4.8-release_p7 (including) |
| Freebsd | Freebsd | 4.8-releng (including) | 4.8-releng (including) |
| Freebsd | Freebsd | 4.8_prerelease (including) | 4.8_prerelease (including) |
| Freebsd | Freebsd | 4.9 (including) | 4.9 (including) |
| Freebsd | Freebsd | 4.9-releng (including) | 4.9-releng (including) |
| Freebsd | Freebsd | 4.9_prerelease (including) | 4.9_prerelease (including) |
| Freebsd | Freebsd | 4.10 (including) | 4.10 (including) |
| Freebsd | Freebsd | 4.10-release (including) | 4.10-release (including) |
| Freebsd | Freebsd | 4.10-release_p8 (including) | 4.10-release_p8 (including) |
| Freebsd | Freebsd | 4.10-releng (including) | 4.10-releng (including) |
| Freebsd | Freebsd | 4.10_prerelease (including) | 4.10_prerelease (including) |
| Freebsd | Freebsd | 4.11-release_p3 (including) | 4.11-release_p3 (including) |
| Freebsd | Freebsd | 4.11-releng (including) | 4.11-releng (including) |
| Freebsd | Freebsd | 4.11-stable (including) | 4.11-stable (including) |
| Freebsd | Freebsd | 4.11_p20_release (including) | 4.11_p20_release (including) |
| Freebsd | Freebsd | 4.11_release (including) | 4.11_release (including) |
| Freebsd | Freebsd | 5.0 (including) | 5.0 (including) |
| Freebsd | Freebsd | 5.0-alpha (including) | 5.0-alpha (including) |
| Freebsd | Freebsd | 5.0-release_p14 (including) | 5.0-release_p14 (including) |
| Freebsd | Freebsd | 5.0-releng (including) | 5.0-releng (including) |
| Freebsd | Freebsd | 5.1 (including) | 5.1 (including) |
| Freebsd | Freebsd | 5.1-alpha (including) | 5.1-alpha (including) |
| Freebsd | Freebsd | 5.1-release (including) | 5.1-release (including) |
| Freebsd | Freebsd | 5.1-release_p5 (including) | 5.1-release_p5 (including) |
| Freebsd | Freebsd | 5.1-releng (including) | 5.1-releng (including) |
| Freebsd | Freebsd | 5.2 (including) | 5.2 (including) |
| Freebsd | Freebsd | 5.2.1-release (including) | 5.2.1-release (including) |
| Freebsd | Freebsd | 5.2.1-releng (including) | 5.2.1-releng (including) |
| Freebsd | Freebsd | 5.3 (including) | 5.3 (including) |
| Freebsd | Freebsd | 5.3-release (including) | 5.3-release (including) |
| Freebsd | Freebsd | 5.3-releng (including) | 5.3-releng (including) |
| Freebsd | Freebsd | 5.3-stable (including) | 5.3-stable (including) |
| Freebsd | Freebsd | 5.4-release (including) | 5.4-release (including) |
| Freebsd | Freebsd | 5.4-releng (including) | 5.4-releng (including) |
| Freebsd | Freebsd | 5.4-stable (including) | 5.4-stable (including) |
| Freebsd | Freebsd | 5.5_release (including) | 5.5_release (including) |
| Freebsd | Freebsd | 5.5_stable (including) | 5.5_stable (including) |
| Freebsd | Freebsd | 6.0 (including) | 6.0 (including) |
| Freebsd | Freebsd | 6.0-release (including) | 6.0-release (including) |
| Freebsd | Freebsd | 6.0-stable (including) | 6.0-stable (including) |
| Freebsd | Freebsd | 6.0_p5_release (including) | 6.0_p5_release (including) |
| Freebsd | Freebsd | 6.1 (including) | 6.1 (including) |
| Freebsd | Freebsd | 6.1-release (including) | 6.1-release (including) |
| Freebsd | Freebsd | 6.1-release_p10 (including) | 6.1-release_p10 (including) |
| Freebsd | Freebsd | 6.1-stable (including) | 6.1-stable (including) |
| Freebsd | Freebsd | 6.2 (including) | 6.2 (including) |
| Freebsd | Freebsd | 6.2-stable (including) | 6.2-stable (including) |
| Freebsd | Freebsd | 6.2_releng (including) | 6.2_releng (including) |
| Freebsd | Freebsd | 6.3 (including) | 6.3 (including) |
| Freebsd | Freebsd | 6.3_releng (including) | 6.3_releng (including) |
| Freebsd | Freebsd | 7.0-pre-release (including) | 7.0-pre-release (including) |
| Freebsd | Freebsd | 7.0_beta4 (including) | 7.0_beta4 (including) |
| Freebsd | Freebsd | 7.0_releng (including) | 7.0_releng (including) |
| Netbsd | Netbsd | 1.6.2 (including) | 1.6.2 (including) |
| Netbsd | Netbsd | 2.0 (including) | 2.0 (including) |
| Netbsd | Netbsd | 2.0.1 (including) | 2.0.1 (including) |
| Netbsd | Netbsd | 2.0.2 (including) | 2.0.2 (including) |
| Netbsd | Netbsd | 2.0.3 (including) | 2.0.3 (including) |
| Netbsd | Netbsd | 2.0.4 (including) | 2.0.4 (including) |
| Netbsd | Netbsd | 2.1 (including) | 2.1 (including) |
| Netbsd | Netbsd | 2.1.1 (including) | 2.1.1 (including) |
| Netbsd | Netbsd | 3.0.1 (including) | 3.0.1 (including) |
| Netbsd | Netbsd | 3.0.2 (including) | 3.0.2 (including) |
| Netbsd | Netbsd | 3.1 (including) | 3.1 (including) |
| Netbsd | Netbsd | 3.1-rc1 (including) | 3.1-rc1 (including) |
| Netbsd | Netbsd | 3.1-rc3 (including) | 3.1-rc3 (including) |
| Netbsd | Netbsd | 4.0 (including) | 4.0 (including) |
| Netbsd | Netbsd | 4.0-beta (including) | 4.0-beta (including) |
| Netbsd | Netbsd | 4.0-beta2 (including) | 4.0-beta2 (including) |
| Openbsd | Openbsd | 2.6 (including) | 2.6 (including) |
| Openbsd | Openbsd | 2.7 (including) | 2.7 (including) |
| Openbsd | Openbsd | 2.8 (including) | 2.8 (including) |
| Openbsd | Openbsd | 2.9 (including) | 2.9 (including) |
| Openbsd | Openbsd | 3.0 (including) | 3.0 (including) |
| Openbsd | Openbsd | 3.1 (including) | 3.1 (including) |
| Openbsd | Openbsd | 3.2 (including) | 3.2 (including) |
| Openbsd | Openbsd | 3.3 (including) | 3.3 (including) |
| Openbsd | Openbsd | 3.4 (including) | 3.4 (including) |
| Openbsd | Openbsd | 3.5 (including) | 3.5 (including) |
| Openbsd | Openbsd | 3.6 (including) | 3.6 (including) |
| Openbsd | Openbsd | 3.7 (including) | 3.7 (including) |
| Openbsd | Openbsd | 3.8 (including) | 3.8 (including) |
| Openbsd | Openbsd | 3.9 (including) | 3.9 (including) |
| Openbsd | Openbsd | 4.0 (including) | 4.0 (including) |
| Openbsd | Openbsd | 4.1 (including) | 4.1 (including) |
| Openbsd | Openbsd | 4.2 (including) | 4.2 (including) |