Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1900
HistoryApr 04, 2013 - 5:55 p.m.

CVE-2013-1900

2013-04-0417:55:00
CWE-189
[email protected]
web.nvd.nist.gov
92
postgresql
openssl
vulnerability
random numbers
impact
pgcrypto
nvd

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

JSON

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the “contrib/pgcrypto functions.”

Affected configurations

NVD
Node
postgresqlpostgresqlMatch9.2
OR
postgresqlpostgresqlMatch9.2.1
OR
postgresqlpostgresqlMatch9.2.2
OR
postgresqlpostgresqlMatch9.2.3
Node
postgresqlpostgresqlMatch9.1
OR
postgresqlpostgresqlMatch9.1.1
OR
postgresqlpostgresqlMatch9.1.2
OR
postgresqlpostgresqlMatch9.1.3
OR
postgresqlpostgresqlMatch9.1.4
OR
postgresqlpostgresqlMatch9.1.5
OR
postgresqlpostgresqlMatch9.1.6
OR
postgresqlpostgresqlMatch9.1.7
OR
postgresqlpostgresqlMatch9.1.8
Node
postgresqlpostgresqlMatch9.0
OR
postgresqlpostgresqlMatch9.0.1
OR
postgresqlpostgresqlMatch9.0.2
OR
postgresqlpostgresqlMatch9.0.3
OR
postgresqlpostgresqlMatch9.0.4
OR
postgresqlpostgresqlMatch9.0.5
OR
postgresqlpostgresqlMatch9.0.6
OR
postgresqlpostgresqlMatch9.0.7
OR
postgresqlpostgresqlMatch9.0.8
OR
postgresqlpostgresqlMatch9.0.9
OR
postgresqlpostgresqlMatch9.0.10
OR
postgresqlpostgresqlMatch9.0.11
OR
postgresqlpostgresqlMatch9.0.12
Node
postgresqlpostgresqlMatch8.4
OR
postgresqlpostgresqlMatch8.4.1
OR
postgresqlpostgresqlMatch8.4.2
OR
postgresqlpostgresqlMatch8.4.3
OR
postgresqlpostgresqlMatch8.4.4
OR
postgresqlpostgresqlMatch8.4.5
OR
postgresqlpostgresqlMatch8.4.6
OR
postgresqlpostgresqlMatch8.4.7
OR
postgresqlpostgresqlMatch8.4.8
OR
postgresqlpostgresqlMatch8.4.9
OR
postgresqlpostgresqlMatch8.4.10
OR
postgresqlpostgresqlMatch8.4.11
OR
postgresqlpostgresqlMatch8.4.12
OR
postgresqlpostgresqlMatch8.4.13
OR
postgresqlpostgresqlMatch8.4.14
OR
postgresqlpostgresqlMatch8.4.15
OR
postgresqlpostgresqlMatch8.4.16
Node
canonicalubuntu_linuxMatch8.04-lts
OR
canonicalubuntu_linuxMatch10.04-lts
OR
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10

References

Related

prion 1
veracode 1
postgresql 1
nvd 1
nessus 26
ubuntucve 1
cvelist 1
openvas 29
centos 1
redhat 1
amazon 2
oraclelinux 1
suse 5
freebsd 1
vmware 1
securityvulns 4
debian 5
ubuntu 1
fedora 3
osv 1
gentoo 1
oracle 1
prion
prion
Code injection
2013-04-04 17:55:00
veracode
veracode
Weak Random Number Generator
2019-05-02 04:56:48
postgresql
postgresql
Vulnerability in contrib module (CVE-2013-1900)
2013-04-04 17:55:00
nvd
nvd
CVE-2013-1900
2013-04-04 17:55:00
nessus
nessus
PostgreSQL 8.4 < 8.4.17 / 9.0 < 9.0.13 / 9.1 < 9.1.9 / 9.2 < 9.2.4 Predictable Random Number Generator
2013-04-08 00:00:00
RHEL 5 / 6 : postgresql and postgresql84 (RHSA-2013:1475)
2013-10-30 00:00:00
Scientific Linux Security Update : postgresql and postgresql84 on SL5.x, SL6.x i386/x86_64 (20131029)
2013-10-31 00:00:00
ubuntucve
ubuntucve
CVE-2013-1900
2013-04-04 00:00:00
cvelist
cvelist
CVE-2013-1900
2013-04-04 17:00:00
openvas
openvas
PostgreSQL Unspecified Vulnerability (Apr 2013) - Windows
2013-04-09 00:00:00
CentOS Update for postgresql84 CESA-2013:1475 centos5
2013-11-08 00:00:00
Oracle: Security Advisory (ELSA-2013-1475)
2015-10-06 00:00:00
centos
centos
postgresql, postgresql84 security update
2013-10-29 20:28:29
redhat
redhat
(RHSA-2013:1475) Moderate: postgresql and postgresql84 security update
2013-10-29 00:00:00
amazon
amazon
Medium: postgresql8
2013-11-03 12:09:00
Critical: postgresql9
2013-04-04 11:49:00
oraclelinux
oraclelinux
postgresql and postgresql84 security update
2013-10-29 00:00:00
suse
suse
Security update for PostgreSQL (important)
2013-04-05 19:06:20
postgresql92: Various security fixes. Update to 9.2.4. (important)
2013-04-05 10:04:42
postgresql91 to version 9.1.9. (important)
2013-04-05 10:04:26
freebsd
freebsd
PostgreSQL -- anonymous remote access data corruption vulnerability
2013-04-04 00:00:00
vmware
vmware
VMware vFabric Postgres security updates
2013-04-04 00:00:00
securityvulns
securityvulns
[USN-1789-1] PostgreSQL vulnerabilities
2013-04-08 00:00:00
PostgreSQL multiple security vulnerabilities
2013-04-08 00:00:00
APPLE-SA-2013-09-12-1 OS X Mountain Lion v10.8.5 and Security Update 2013-004
2013-10-03 00:00:00
debian
debian
[BSA-080] Security Update for postgresql-9.1
2013-04-08 08:27:20
[SECURITY] [DSA 2657-1] postgresql-8.4 security update
2013-04-04 13:47:32
[SECURITY] [DSA 2658-1] postgresql-9.1 security update
2013-04-04 14:06:34
ubuntu
ubuntu
PostgreSQL vulnerabilities
2013-04-04 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: postgresql-9.2.4-1.fc19
2013-04-20 19:59:46
[SECURITY] Fedora 18 Update: postgresql-9.2.4-1.fc18
2013-04-05 22:59:41
[SECURITY] Fedora 17 Update: postgresql-9.1.9-1.fc17
2013-04-05 23:11:53
osv
osv
postgresql-9.1 - several
2013-04-04 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2014-08-29 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

JSON
Related for CVE-2013-1900
prion1veracode1postgresql1nvd1nessus26ubuntucve1cvelist1openvas29centos1redhat1amazon2oraclelinux1suse5freebsd1vmware1securityvulns4debian5ubuntu1fedora3osv1gentoo1oracle1