QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-10604

Back to search

CVE-2024-10604

Published: Jan 30, 2025

Modified: Feb 24, 2025

PUBLISHED

Description

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances

VendorProductVersions

Google

Fuchsia

unaffected
Release F19

Weaknesses (CWE)

CWE-330

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now