CVE-2013-0294

Katalog CVE

CVSS 5.9 · Medium EPSS 2,9%

Kerentanan Use of Insufficiently Random Values pada pyrad project pyrad, fedoraproject fedora. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.

Rincian

Terbit di NVD

28 Januari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-330: Use of Insufficiently Random Values

EPSS (30 hari)

2,9% peluang dieksploitasi; lebih tinggi dari 86,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=911682 issue tracking · patch · advisory pihak ketiga
• https://github.com/wichert/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5 patch · advisory pihak ketiga
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html mailing list · advisory pihak ketiga
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115705.html mailing list · advisory pihak ketiga
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116567.html mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2013/02/15/13 mailing list · advisory pihak ketiga
• http://www.securityfocus.com/bid/57984 advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82133 advisory pihak ketiga · vdb entry