Unrated severityNVD Advisory· Published Jan 30, 2025· Updated Feb 24, 2025

CVE-2024-10603

Description

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Gvisorllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: release-20241028.0

Patches

Vulnerability mechanics

References

github.com/google/gvisor/commit/5d2bf2546805afa09a6f6d9b23ec267823e32205mitre
github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2mitre
github.com/google/gvisor/commit/cbdb2c61b1f753834cedf2ebe68cbc335dadca52mitre
www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdfmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000