Lucene search

[email protected]NVD:CVE-2013-4345

HistoryOct 10, 2013 - 10:55 a.m.

CVE-2013-4345

2013-10-1010:55:06

CWE-189

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤3.11.4

linuxlinux_kernelMatch3.0rc1

linuxlinux_kernelMatch3.0rc2

linuxlinux_kernelMatch3.0rc3

linuxlinux_kernelMatch3.0rc4

linuxlinux_kernelMatch3.0rc5

linuxlinux_kernelMatch3.0rc6

linuxlinux_kernelMatch3.0rc7

linuxlinux_kernelMatch3.0.1

linuxlinux_kernelMatch3.0.2

linuxlinux_kernelMatch3.0.3

linuxlinux_kernelMatch3.0.4

linuxlinux_kernelMatch3.0.5

linuxlinux_kernelMatch3.0.6

linuxlinux_kernelMatch3.0.7

linuxlinux_kernelMatch3.0.8

linuxlinux_kernelMatch3.0.9

linuxlinux_kernelMatch3.0.10

linuxlinux_kernelMatch3.0.11

linuxlinux_kernelMatch3.0.12

linuxlinux_kernelMatch3.0.13

linuxlinux_kernelMatch3.0.14

linuxlinux_kernelMatch3.0.15

linuxlinux_kernelMatch3.0.16

linuxlinux_kernelMatch3.0.17

linuxlinux_kernelMatch3.0.18

linuxlinux_kernelMatch3.0.19

linuxlinux_kernelMatch3.0.20

linuxlinux_kernelMatch3.0.21

linuxlinux_kernelMatch3.0.22

linuxlinux_kernelMatch3.0.23

linuxlinux_kernelMatch3.0.24

linuxlinux_kernelMatch3.0.25

linuxlinux_kernelMatch3.0.26

linuxlinux_kernelMatch3.0.27

linuxlinux_kernelMatch3.0.28

linuxlinux_kernelMatch3.0.29

linuxlinux_kernelMatch3.0.30

linuxlinux_kernelMatch3.0.31

linuxlinux_kernelMatch3.0.32

linuxlinux_kernelMatch3.0.33

linuxlinux_kernelMatch3.0.34

linuxlinux_kernelMatch3.0.35

linuxlinux_kernelMatch3.0.36

linuxlinux_kernelMatch3.0.37

linuxlinux_kernelMatch3.0.38

linuxlinux_kernelMatch3.0.39

linuxlinux_kernelMatch3.0.40

linuxlinux_kernelMatch3.0.41

linuxlinux_kernelMatch3.0.42

linuxlinux_kernelMatch3.0.43

linuxlinux_kernelMatch3.0.44

linuxlinux_kernelMatch3.0.45

linuxlinux_kernelMatch3.0.46

linuxlinux_kernelMatch3.0.47

linuxlinux_kernelMatch3.0.48

linuxlinux_kernelMatch3.0.49

linuxlinux_kernelMatch3.0.50

linuxlinux_kernelMatch3.0.51

linuxlinux_kernelMatch3.0.52

linuxlinux_kernelMatch3.0.53

linuxlinux_kernelMatch3.0.54

linuxlinux_kernelMatch3.0.55

linuxlinux_kernelMatch3.0.56

linuxlinux_kernelMatch3.0.57

linuxlinux_kernelMatch3.0.58

linuxlinux_kernelMatch3.0.59

linuxlinux_kernelMatch3.0.60

linuxlinux_kernelMatch3.0.61

linuxlinux_kernelMatch3.0.62

linuxlinux_kernelMatch3.0.63

linuxlinux_kernelMatch3.0.64

linuxlinux_kernelMatch3.0.65

linuxlinux_kernelMatch3.0.66

linuxlinux_kernelMatch3.0.67

linuxlinux_kernelMatch3.0.68

linuxlinux_kernelMatch3.1

linuxlinux_kernelMatch3.1rc1

linuxlinux_kernelMatch3.1rc2

linuxlinux_kernelMatch3.1rc3

linuxlinux_kernelMatch3.1rc4

linuxlinux_kernelMatch3.1.1

linuxlinux_kernelMatch3.1.2

linuxlinux_kernelMatch3.1.3

linuxlinux_kernelMatch3.1.4

linuxlinux_kernelMatch3.1.5

linuxlinux_kernelMatch3.1.6

linuxlinux_kernelMatch3.1.7

linuxlinux_kernelMatch3.1.8

linuxlinux_kernelMatch3.1.9

linuxlinux_kernelMatch3.1.10

linuxlinux_kernelMatch3.2

linuxlinux_kernelMatch3.2x86

linuxlinux_kernelMatch3.2rc2

linuxlinux_kernelMatch3.2rc3

linuxlinux_kernelMatch3.2rc4

linuxlinux_kernelMatch3.2rc5

linuxlinux_kernelMatch3.2rc6

linuxlinux_kernelMatch3.2rc7

linuxlinux_kernelMatch3.2.1

linuxlinux_kernelMatch3.2.2

linuxlinux_kernelMatch3.2.3

linuxlinux_kernelMatch3.2.4

linuxlinux_kernelMatch3.2.5

linuxlinux_kernelMatch3.2.6

linuxlinux_kernelMatch3.2.7

linuxlinux_kernelMatch3.2.8

linuxlinux_kernelMatch3.2.9

linuxlinux_kernelMatch3.2.10

linuxlinux_kernelMatch3.2.11

linuxlinux_kernelMatch3.2.12

linuxlinux_kernelMatch3.2.13

linuxlinux_kernelMatch3.2.14

linuxlinux_kernelMatch3.2.15

linuxlinux_kernelMatch3.2.16

linuxlinux_kernelMatch3.2.17

linuxlinux_kernelMatch3.2.18

linuxlinux_kernelMatch3.2.19

linuxlinux_kernelMatch3.2.20

linuxlinux_kernelMatch3.2.21

linuxlinux_kernelMatch3.2.22

linuxlinux_kernelMatch3.2.23

linuxlinux_kernelMatch3.2.24

linuxlinux_kernelMatch3.2.25

linuxlinux_kernelMatch3.2.26

linuxlinux_kernelMatch3.2.27

linuxlinux_kernelMatch3.2.28

linuxlinux_kernelMatch3.2.29

linuxlinux_kernelMatch3.2.30

linuxlinux_kernelMatch3.3

linuxlinux_kernelMatch3.3rc1

linuxlinux_kernelMatch3.3rc2

linuxlinux_kernelMatch3.3rc3

linuxlinux_kernelMatch3.3rc4

linuxlinux_kernelMatch3.3rc5

linuxlinux_kernelMatch3.3rc6

linuxlinux_kernelMatch3.3rc7

linuxlinux_kernelMatch3.3.1

linuxlinux_kernelMatch3.3.2

linuxlinux_kernelMatch3.3.3

linuxlinux_kernelMatch3.3.4

linuxlinux_kernelMatch3.3.5

linuxlinux_kernelMatch3.3.6

linuxlinux_kernelMatch3.3.7

linuxlinux_kernelMatch3.3.8

linuxlinux_kernelMatch3.4

linuxlinux_kernelMatch3.4rc1

linuxlinux_kernelMatch3.4rc2

linuxlinux_kernelMatch3.4rc3

linuxlinux_kernelMatch3.4rc3x86

linuxlinux_kernelMatch3.4rc4

linuxlinux_kernelMatch3.4rc5

linuxlinux_kernelMatch3.4rc6

linuxlinux_kernelMatch3.4rc7

linuxlinux_kernelMatch3.4.1

linuxlinux_kernelMatch3.4.2

linuxlinux_kernelMatch3.4.3

linuxlinux_kernelMatch3.4.4

linuxlinux_kernelMatch3.4.5

linuxlinux_kernelMatch3.4.6

linuxlinux_kernelMatch3.4.7

linuxlinux_kernelMatch3.4.8

linuxlinux_kernelMatch3.4.9

linuxlinux_kernelMatch3.4.10

linuxlinux_kernelMatch3.4.11

linuxlinux_kernelMatch3.4.12

linuxlinux_kernelMatch3.4.13

linuxlinux_kernelMatch3.4.14

linuxlinux_kernelMatch3.4.15

linuxlinux_kernelMatch3.4.16

linuxlinux_kernelMatch3.4.17

linuxlinux_kernelMatch3.4.18

linuxlinux_kernelMatch3.4.19

linuxlinux_kernelMatch3.4.20

linuxlinux_kernelMatch3.4.21

linuxlinux_kernelMatch3.4.22

linuxlinux_kernelMatch3.4.23

linuxlinux_kernelMatch3.4.24

linuxlinux_kernelMatch3.4.25

linuxlinux_kernelMatch3.4.26

linuxlinux_kernelMatch3.4.27

linuxlinux_kernelMatch3.4.28

linuxlinux_kernelMatch3.4.29

linuxlinux_kernelMatch3.4.30

linuxlinux_kernelMatch3.4.31

linuxlinux_kernelMatch3.4.32

linuxlinux_kernelMatch3.5.1

linuxlinux_kernelMatch3.5.2

linuxlinux_kernelMatch3.5.3

linuxlinux_kernelMatch3.5.4

linuxlinux_kernelMatch3.5.5

linuxlinux_kernelMatch3.5.6

linuxlinux_kernelMatch3.5.7

linuxlinux_kernelMatch3.6

linuxlinux_kernelMatch3.6.1

linuxlinux_kernelMatch3.6.2

linuxlinux_kernelMatch3.6.3

linuxlinux_kernelMatch3.6.4

linuxlinux_kernelMatch3.6.5

linuxlinux_kernelMatch3.6.6

linuxlinux_kernelMatch3.6.7

linuxlinux_kernelMatch3.6.8

linuxlinux_kernelMatch3.6.9

linuxlinux_kernelMatch3.6.10

linuxlinux_kernelMatch3.6.11

linuxlinux_kernelMatch3.7

linuxlinux_kernelMatch3.7.1

linuxlinux_kernelMatch3.7.2

linuxlinux_kernelMatch3.7.3

linuxlinux_kernelMatch3.7.4

linuxlinux_kernelMatch3.7.5

linuxlinux_kernelMatch3.7.6

linuxlinux_kernelMatch3.7.7

linuxlinux_kernelMatch3.7.8

linuxlinux_kernelMatch3.7.9

linuxlinux_kernelMatch3.7.10

linuxlinux_kernelMatch3.8.0

linuxlinux_kernelMatch3.8.1

linuxlinux_kernelMatch3.8.2

linuxlinux_kernelMatch3.8.3

linuxlinux_kernelMatch3.8.4

linuxlinux_kernelMatch3.8.5

linuxlinux_kernelMatch3.8.6

linuxlinux_kernelMatch3.8.7

linuxlinux_kernelMatch3.8.8

linuxlinux_kernelMatch3.8.9

linuxlinux_kernelMatch3.8.10

linuxlinux_kernelMatch3.8.11

linuxlinux_kernelMatch3.8.12

linuxlinux_kernelMatch3.8.13

linuxlinux_kernelMatch3.9rc1

linuxlinux_kernelMatch3.9rc2

linuxlinux_kernelMatch3.9rc3

linuxlinux_kernelMatch3.9rc4

linuxlinux_kernelMatch3.9rc5

linuxlinux_kernelMatch3.9rc6

linuxlinux_kernelMatch3.9rc7

linuxlinux_kernelMatch3.9.0

linuxlinux_kernelMatch3.9.1

linuxlinux_kernelMatch3.9.2

linuxlinux_kernelMatch3.9.3

linuxlinux_kernelMatch3.9.4

linuxlinux_kernelMatch3.9.5

linuxlinux_kernelMatch3.9.6

linuxlinux_kernelMatch3.9.7

linuxlinux_kernelMatch3.9.8

linuxlinux_kernelMatch3.9.9

linuxlinux_kernelMatch3.9.10

linuxlinux_kernelMatch3.9.11

linuxlinux_kernelMatch3.10.1

linuxlinux_kernelMatch3.10.2

linuxlinux_kernelMatch3.10.3

linuxlinux_kernelMatch3.10.4

linuxlinux_kernelMatch3.10.5

linuxlinux_kernelMatch3.10.6

linuxlinux_kernelMatch3.10.7

linuxlinux_kernelMatch3.10.8

linuxlinux_kernelMatch3.10.9

linuxlinux_kernelMatch3.10.10

linuxlinux_kernelMatch3.10.11

linuxlinux_kernelMatch3.10.12

linuxlinux_kernelMatch3.11

linuxlinux_kernelMatch3.11.1

linuxlinux_kernelMatch3.11.2

linuxlinux_kernelMatch3.11.3

Node

fedoraprojectfedoraMatch18

fedoraprojectfedoraMatch19

redhatenterprise_linuxMatch5

redhatenterprise_linuxMatch6.0

redhatenterprise_mrgMatch2.0

redhatenterprise_mrgMatch2.1

redhatenterprise_mrgMatch2.2

redhatenterprise_mrgMatch2.3

redhatenterprise_mrgMatch2.4

References

marc.info/?l=linux-crypto-vger&m=137942122902845&w=2

rhn.redhat.com/errata/RHSA-2013-1449.html

rhn.redhat.com/errata/RHSA-2013-1490.html

rhn.redhat.com/errata/RHSA-2013-1645.html

www.securityfocus.com/bid/62740

www.ubuntu.com/usn/USN-2064-1

www.ubuntu.com/usn/USN-2065-1

www.ubuntu.com/usn/USN-2068-1

www.ubuntu.com/usn/USN-2070-1

www.ubuntu.com/usn/USN-2071-1

www.ubuntu.com/usn/USN-2072-1

www.ubuntu.com/usn/USN-2074-1

www.ubuntu.com/usn/USN-2075-1

www.ubuntu.com/usn/USN-2076-1

www.ubuntu.com/usn/USN-2109-1

www.ubuntu.com/usn/USN-2110-1

www.ubuntu.com/usn/USN-2158-1

bugzilla.redhat.com/show_bug.cgi?id=1007690

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

Related for NVD:CVE-2013-4345

prion1 cvelist1 nessus35 fedora29 ubuntucve1 cve1 debiancve1 openvas85 ubuntu12 oraclelinux7 redhat4 centos2 veracode15 securityvulns2 debian1 osv1 altlinux1