Vulnerabilities > CVE-2021-45489 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Netbsd

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
netbsd
CWE-338

Summary

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.