Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2024-10026— Improved Seeding and Hashing In gVisor

EPSS 0.05% · P15
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-10026

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Improved Seeding and Hashing In gVisor
Source: NVD (National Vulnerability Database)
Vulnerability Description
A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
可逆的单向哈希
Source: NVD (National Vulnerability Database)
Vulnerability Title
Google gVisor 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Google gVisor是Google公司的一款使用Go语言编写的使用在Linux系统中的用户空间内核。 Google gVisor存在安全漏洞,该漏洞源于存在信息可计算漏洞,导致攻击者可算信息用于追踪设备。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
GooglegVisor--

II. Public POCs for CVE-2024-10026

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-10026

登录查看更多情报信息。

Same Patch Batch · Google · 2025-01-30 · 3 CVEs total

CVE-2024-10604Identifiable Header Values In Fuchsia Leading To Tracking of The User
CVE-2024-10603Google gVisor 安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2024-10026

No comments yet


Leave a comment