PT-2025-54582 · Librnp0 · Librnp0

Published 2025-01-01 · Updated 2025-11-27 · CVE-2025-13402

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions librnp0-0.18.1-1.1

Description The issue involves RNP PKESK session keys being generated as all-zero. This can lead to security concerns as it compromises the randomness and strength of the generated keys.

Recommendations Update to librnp0-0.18.1-1.1.

Related Identifiers

CVE-2025-13402

OPENSUSE-SU-2025:15762-1

OPENSUSE-SU-2025:20116-1

Affected Products

Librnp0

References · 11

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-13402 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-13402 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-13402 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-13402 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-13402 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15762-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20116-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-13402 · Note
• https://suse.com/security/cve/CVE-2025-13470 · Note
• https://bugzilla.suse.com/1253957 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2415863 · Note