CVE-2021-45484: Netbsd

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.

Affected products

• Netbsd Netbsd: up to and including 9.2

Published 2021-12-25. Last modified 2026-06-17.