Description (CNA)
Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Google / Fuchsia | unaffected Release F19 |
CWE
CWE-330
References
- https://fuchsia.googlesource.com/fuchsia/+/a3c17a4d6b3140f9175d6cf6ac4eb4e775f8dea8
- https://fuchsia.googlesource.com/fuchsia/+/40e7fbcdcd013441daf4492f1ead349a9e5b80dc
- https://www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdf
ADP enrichment
No English description supplied.
No references supplied.