CVE-2019-11840: debian debian_linux Use of Insufficiently Random Values
Vulnerability summary
CVE-2019-11840 is a medium (CVSS 5.9) Use of Insufficiently Random Values vulnerability in debian debian_linux. EPSS estimates a 3.45% chance of exploitation in the next 30 days, higher than 89% of scored vulnerabilities.
Not severe (CVSS 5.9, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 2Timeline
- 09-05-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
CVSS metrics
7 scores · 6 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · WolfiEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · GoEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · ChainguardEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
3.45%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
Decrease -0.01 pp
From 3.46% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Debian5 products
- golang-go.crypto< 1:0.0~git20200221.2aa609c-1 | < 0.0~hg190-1+deb8u1
- obfs4proxy< 0.0.7-1+deb8u1
- rclone< 1.35-1+deb8u1
- snapd< 2.21-2+deb9u1
- debian_linuxEOL8.0 | 9.0 | 10.0
Chainguard4 products
- dex-k8s-authenticatorAll versions (No fix recorded)
- k3d< 5.6.0-r11
- k3d-proxy< 5.6.0-r11
- k3d-tools< 5.6.0-r11
Wolfi3 products
- k3d< 5.6.0-r11
- k3d-proxy< 5.6.0-r11
- k3d-tools< 5.6.0-r11
Ubuntu2 products
- golang-go.cryptoAll versions (No fix recorded)
- snapdAll versions (No fix recorded)
Golang1 product
- cryptona
Golang.org/x1 product
- crypto< 0.0.0-20190320223903-b7391e95e576
6 vendors · 16 products
References
20 links- go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113dMailing ListPatchThird Party AdvisoryREPORTFIXWEB
lists.debian.org/debian-lts-announce/2019/06/msg00029.htmlMailing ListThird Party AdvisoryAdvisoryWEB- lists.debian.org/debian-lts-announce/2020/10/msg00014.htmlMailing ListThird Party AdvisoryAdvisoryWEB
- lists.debian.org/debian-lts-announce/2020/11/msg00016.htmlMailing ListThird Party AdvisoryAdvisoryWEB
- lists.debian.org/debian-lts-announce/2020/11/msg00030.htmlMailing ListThird Party AdvisoryAdvisoryWEB
- lists.debian.org/debian-lts-announce/2021/01/msg00015.htmlMailing ListThird Party AdvisoryAdvisoryWEB
Show all 20 references
- github.com/golang/goPACKAGE