CVE-2021-45487 Weak cryptography in n/a

What is CVE-2021-45487?

CVE-2021-45487 is a high-severity vulnerability in Netbsd Netbsd, published on 25 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.

Weakness: CWE-330

Which versions are affected by CVE-2021-45487?

It affects 1 product.

Products include Netbsd Netbsd.

How do I fix CVE-2021-45487?

No fix has been published for CVE-2021-45487 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-45487 being exploited?

There is no known exploitation of CVE-2021-45487 in the wild and no public exploit code.

Other vulnerabilities in Netbsd Netbsd

• CVE-2017-1000374 Security feature bypass in n/a Critical 9.8
• CVE-2017-1000375 Memory corruption in n/a Critical 9.8
• CVE-2017-1000378 Denial of service in n/a Critical 9.8
• CVE-2015-8212 Command injection in n/a Critical 9.8
• CVE-2008-3584 Denial of service in n/a Critical 9.3

All Netbsd Netbsd vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-g27v-678p-wjfh.