Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-10-10T10:00:00

Updated: 2024-08-06T16:38:01.956Z

Reserved: 2013-06-12T00:00:00

Link: CVE-2013-4345

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-10-10T10:55:06.380

Modified: 2024-11-21T01:55:23.653

Link: CVE-2013-4345

cve-icon Redhat

Severity : Moderate

Publid Date: 2013-09-17T00:00:00Z

Links: CVE-2013-4345 - Bugzilla