Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2013-10-10T10:00:00

Updated: 2015-05-19T17:57:00

Reserved: 2013-06-12T00:00:00


Link: CVE-2013-4345

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2013-10-10T10:55:06.380

Modified: 2023-02-13T00:28:48.623


Link: CVE-2013-4345

JSON object: View

cve-icon Redhat Information

No data.

CWE