CVE-2013-4345: fedoraproject fedora Numeric Errors
CVSS: 5.8v2.0MediumModified
AliasesUBUNTU-CVE-2013-4345DEBIAN-CVE-2013-4345
Published 10-10-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-4345 is a medium (CVSS 5.8) Numeric Errors vulnerability in fedoraproject fedora. EPSS estimates a 3.21% chance of exploitation in the next 30 days, higher than 87.9% of scored vulnerabilities.
CVSS score
5.8/10
010
Medium · v2.0 (NVD)EPSS score
3.21%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4Timeline
- 10-10-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:NSourcesSingle source
EPSS trend
Probability
3.21%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.21% on 18-09-2026
18-09-202618-10-2026
EPSS score3.21%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu10 products
- linux< 3.12.0-5.13 | < 4.2.0-16.19
- linux-aws< 4.4.0-1002.2 | < 4.4.0-1001.10
- linux-gke< 4.4.0-1003.3
- linux-hwe< 4.8.0-36.36~16.04.1
- linux-lts-utopic< 3.16.0-25.33~14.04.2
Redhat2 products
- enterprise_linuxEOL5 | 6.0
- enterprise_mrg2.0 | 2.1 | 2.2 | 2.3 | 2.4
Debian1 product
- linux< 3.11.5-1
Fedoraproject1 product
- fedoraEOL18 | 19
Linux1 product
- linux_kernel≤ 3.11.4 | 3.0:rc1 | 3.0:rc2 | 3.0:rc3 | 3.0:rc4 | 3.0:rc5 | 3.0:rc6 | 3.0:rc7 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.0.12 | 3.0.13 | 3.0.14 | 3.0.15 | 3.0.16 | 3.0.17 | 3.0.18 | 3.0.19 | 3.0.20 | 3.0.21 | 3.0.22 | 3.0.23 | 3.0.24 | 3.0.25 | 3.0.26 | 3.0.27 | 3.0.28 | 3.0.29 | 3.0.30 | 3.0.31 | 3.0.32 | 3.0.33 | 3.0.34 | 3.0.35 | 3.0.36 | 3.0.37 | 3.0.38 | 3.0.39 | 3.0.40 | 3.0.41 | 3.0.42 | 3.0.43 | 3.0.44 | 3.0.45 | 3.0.46 | 3.0.47 | 3.0.48 | 3.0.49 | 3.0.50 | 3.0.51 | 3.0.52 | 3.0.53 | 3.0.54 | 3.0.55 | 3.0.56 | 3.0.57 | 3.0.58 | 3.0.59 | 3.0.60 | 3.0.61 | 3.0.62 | 3.0.63 | 3.0.64 | 3.0.65 | 3.0.66 | 3.0.67 | 3.0.68 | 3.1 | 3.1:rc1 | 3.1:rc2 | 3.1:rc3 | 3.1:rc4 | 3.11 | 3.12 | 3.13 | 3.14 | 3.15 | 3.16 | 3.17 | 3.18 | 3.19 | 3.1.10 | 3.2 | 3.2:rc2 | 3.2:rc3 | 3.2:rc4 | 3.2:rc5 | 3.2:rc6 | 3.2:rc7 | 3.2.1 | 3.2.2 | 3.2.3 | 3.2.4 | 3.2.5 | 3.2.6 | 3.2.7 | 3.2.8 | 3.2.9 | 3.2.10 | 3.2.11 | 3.2.12 | 3.2.13 | 3.2.14 | 3.2.15 | 3.2.16 | 3.2.17 | 3.2.18 | 3.2.19 | 3.2.20 | 3.2.21 | 3.2.22 | 3.2.23 | 3.2.24 | 3.2.25 | 3.2.26 | 3.2.27 | 3.2.28 | 3.2.29 | 3.2.30 | 3.3 | 3.3:rc1 | 3.3:rc2 | 3.3:rc3 | 3.3:rc4 | 3.3:rc5 | 3.3:rc6 | 3.3:rc7 | 3.3.1 | 3.3.2 | 3.3.3 | 3.3.4 | 3.3.5 | 3.3.6 | 3.3.7 | 3.3.8 | 3.4 | 3.4:rc1 | 3.4:rc2 | 3.4:rc3 | 3.4:rc4 | 3.4:rc5 | 3.4:rc6 | 3.4:rc7 | 3.4.1 | 3.4.2 | 3.4.3 | 3.4.4 | 3.4.5 | 3.4.6 | 3.4.7 | 3.4.8 | 3.4.9 | 3.4.10 | 3.4.11 | 3.4.12 | 3.4.13 | 3.4.14 | 3.4.15 | 3.4.16 | 3.4.17 | 3.4.18 | 3.4.19 | 3.4.20 | 3.4.21 | 3.4.22 | 3.4.23 | 3.4.24 | 3.4.25 | 3.4.26 | 3.4.27 | 3.4.28 | 3.4.29 | 3.4.30 | 3.4.31 | 3.4.32 | 3.5.1 | 3.5.2 | 3.5.3 | 3.5.4 | 3.5.5 | 3.5.6 | 3.5.7 | 3.6 | 3.6.1 | 3.6.2 | 3.6.3 | 3.6.4 | 3.6.5 | 3.6.6 | 3.6.7 | 3.6.8 | 3.6.9 | 3.6.10 | 3.6.11 | 3.7 | 3.7.1 | 3.7.2 | 3.7.3 | 3.7.4 | 3.7.5 | 3.7.6 | 3.7.7 | 3.7.8 | 3.7.9 | 3.7.10 | 3.8.0 | 3.8.1 | 3.8.2 | 3.8.3 | 3.8.4 | 3.8.5 | 3.8.6 | 3.8.7 | 3.8.8 | 3.8.9 | 3.8.10 | 3.8.11 | 3.8.12 | 3.8.13 | 3.9:rc1 | 3.9:rc2 | 3.9:rc3 | 3.9:rc4 | 3.9:rc5 | 3.9:rc6 | 3.9:rc7 | 3.9.0 | 3.9.1 | 3.9.2 | 3.9.3 | 3.9.4 | 3.9.5 | 3.9.6 | 3.9.7 | 3.9.8 | 3.9.9 | 3.9.10 | 3.9.11 | 3.10.1 | 3.10.2 | 3.10.3 | 3.10.4 | 3.10.5 | 3.10.6 | 3.10.7 | 3.10.8 | 3.10.9 | 3.10.10 | 3.10.11 | 3.10.12 | 3.11.1 | 3.11.2 | 3.11.3
5 vendors · 15 products
References
33 links- bugzilla.redhat.com/show_bug.cgi?id=1007690X Refsource CONFIRM