PT-2014-3401 · Apache+1 · Apache Harmony+1

Publicado 2014-04-29 · Atualizado 2014-04-30 · CVE-2013-7372

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Harmony versions through 6.0M3 Android versions prior to 4.4

Description The issue concerns the SecureRandom implementation, specifically the engineNextBytes function in the SHA1PRNG SecureRandomImpl class. When no seed is provided, it uses an incorrect offset value, leading to predictability in the pseudo-random number generator (PRNG). This predictability can be exploited by attackers to defeat cryptographic protection mechanisms. There have been real-world incidents where this issue was exploited, notably against Bitcoin wallet applications in August 2013.

Recommendations For Apache Harmony versions through 6.0M3, consider updating to a version that addresses this issue, as the current implementation allows for PRNG predictability. For Android versions prior to 4.4, update to Android 4.4 or later to mitigate the risk associated with the predictable PRNG. At the moment, there is no information about additional mitigation measures for other affected products.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-7372

Produtos afetados

Android

Apache Harmony

Referências · 5

• 🔥 http://nds.rub.de/media/nds/veroeffentlichungen/2013/03/25/paper_2.pdf · Exploit
• http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html · Correção
• https://bitcoin.org/en/alert/2013-08-11-android · Nota
• https://android.googlesource.com/platform/libcore/+/kitkat-release/luni/src/main/java/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2013-7372 · Nota de Segurança