CVE-2018-1108

Public on 2018-05-21

Modified on 2019-01-25

Description

A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.

Severity

Low

See what this means

CVSS v3 Base Score

5.9

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	kernel	2018-05-25 18:12	ALAS-2018-1023
Amazon Linux 2 - Core	kernel	2018-05-24 18:14	ALAS2-2018-1023

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	5.9	CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
NVD	CVSSv2	4.3	AV:N/AC:M/Au:N/C:N/I:P/A:N
NVD	CVSSv3	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

References

Red Hat: CVE-2018-1108 Mitre: CVE-2018-1108 FAQs regarding Amazon Linux ALAS/CVE Severity