linux linux-kernel CVE-2013-4345 vulnerability in Linux and Other Products
Published on October 10, 2013

product logo product logo product logo
Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2013-4345

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2013-4345 are published in these products:

Linux Kernel
 
Fedora Project Fedora
 
Red Hat Enterprise Mrg
 
Red Hat Enterprise Linux (RHEL)
 

Exploit Probability

EPSS
1.06%
Percentile
77.26%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.