CVE-2013-4345

kernel: ansi_cprng: off by one error in non-block size request

Published Oct 10, 2013 CVSS 2.0 · 5.8 Medium EPSS 3.2% KEV · Not listed
Description
Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2906-1 linux-2.6 security update
EUVD EUVD EUVD-2013-4231 Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
Ubuntu USN Ubuntu USN USN-2064-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2065-1 Linux kernel (EC2) vulnerabilities
Ubuntu USN Ubuntu USN USN-2068-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2070-1 Linux kernel (Saucy HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2071-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2072-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2074-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2075-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2076-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2109-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2110-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2158-1 Linux kernel (Raring HWE) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:38 PM
Reserved
Jun 12, 2013, 12:00 AM
Status
Modified
Published
Oct 10, 2013, 10:55 AM
Modified
Jun 16, 2026, 11:57 PM
Severity
Moderate
Public date
Sep 17, 2013, 12:00 AM