In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.
CWE-330