CVE-2013-2213

Katalog CVE

CVSS 5.5 · Medium EPSS 0,31%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada kde paste applet. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output.

Rincian

Terbit di NVD

11 Februari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://openwall.com/lists/oss-security/2013/06/13/1 mailing list · advisory pihak ketiga
• http://openwall.com/lists/oss-security/2013/06/26/2 mailing list · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=978243 exploit · issue tracking · advisory pihak ketiga