CVE-2023-49343

Katalog CVE

CVSS 7.8 · High EPSS 0,30%

Kerentanan Predictable Seed in Pseudo-Random Number Generator (PRNG) pada ubuntubudgie budgie extras. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.

Rincian

Terbit di NVD

14 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-337: Predictable Seed in Pseudo-Random Number Generator (PRNG)
CWE-668: Exposure of Resource to Wrong Sphere
CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ubuntu.com/security/notices/USN-6556-1 advisory vendor
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49343 advisory pihak ketiga
• https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-27g2-7x65-3cc5 advisory pihak ketiga