CVE-2024-10603

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-10603
CWE	https://cwe.mitre.org/data/definitions/340.html

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-10603

CWE

https://cwe.mitre.org/data/definitions/340.html

Weaknesses in the generation of TCP/UDP source ports and some other header values in Googles gVisor allowed them to be predicted by an external attacker in some circumstances.

Weakness

The product uses a scheme that generates numbers or identifiers that are more predictable than required.

References

https://github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205
https://github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2
https://github.com/google/gvisor/commit/cbdb2c61b1f753834cedf2ebe68cbc335dadca52

Generation of Predictable Numbers or Identifiers

Weakness

References