CVE-2013-1900

postgresql: Improper randomization of pgcrypto functions (requiring random seed)

Published Apr 4, 2013 CVSS 2.0 · 8.5 High EPSS 4.5% KEV · Not listed
Description
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2657-1 postgresql-8.4 security update
Debian DSA Debian DSA DSA-2658-1 postgresql-9.1 security update
EUVD EUVD EUVD-2013-1896 PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."
Ubuntu USN Ubuntu USN USN-1789-1 PostgreSQL vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 3:20 PM
Reserved
Feb 19, 2013, 12:00 AM
Status
Modified
Published
Apr 4, 2013, 5:55 PM
Modified
Jun 16, 2026, 11:52 PM
Severity
Low
Public date
Apr 4, 2013, 12:00 AM