PT-2013-1026 · Linux+4 · Linux Kernel+4

Stephan Mueller · Publicado 2013-10-10 · Atualizado 2023-02-13 · CVE-2013-4345

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.11.4

Description The issue is related to an off-by-one error in the get prng bytes function, which affects the management of the state of consumed data. This makes it easier for attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data. The error leads to improper management of the state of the consumed data, potentially resulting in the use of less entropy.

Recommendations For Linux kernel versions through 3.11.4, update to a version that contains a fix for this issue to prevent improper management of the state of consumed data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2013-1178

ALT-PU-2014-1422

BDU:2014-00092

CESA-2013_1645

CVE-2013-4345

DSA-2906-1

RHSA-2013:1449

RHSA-2013:1490

RHSA-2013:1645

RHSA-2013_1449

RHSA-2013_1645

SUSE-RU-2015:0621-1

SUSE-SU-2014_0140-1

SUSE-SU-2014_0169-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0652-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

USN-2064-1

USN-2065-1

USN-2068-1

USN-2070-1

USN-2071-1

USN-2072-1

USN-2074-1

USN-2075-1

USN-2076-1

USN-2109-1

USN-2110-1

USN-2158-1

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Referências · 387

• 🔥 https://github.com/luan0ap/cve-2018-14634 · Exploit
• https://github.com/torvalds/linux/commit/e40f193f5bb022e927a57a4f5d5194e4f12ddb74 · Nota
• https://github.com/torvalds/linux/commit/c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b · Nota
• https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424 · Nota
• https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 · Nota
• https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 · Nota
• https://github.com/torvalds/linux/commit/2690d97ade05c5325cbf7c72b94b90d265659886 · Nota
• https://github.com/torvalds/linux/commit/6062a8dc0517bce23e3c2f7d2fea5e22411269a3 · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/a8b33654b1e3b0c74d4a1fed041c9aae50b3c427 · Nota
• https://github.com/torvalds/linux/commit/7d3e91a89b7adbc2831334def9e494dd9892f9af · Nota
• https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/torvalds/linux/commit/12d6e7538e2d418c08f082b1b44ffa5fb7270ed8 · Nota
• https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 · Nota