VDB

DEBIAN-CVE-2013-4345

DEBIAN-CVE-2013-4345 PUBLISHED

Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

Affected Products

VendorProductVersions
Debian:11linux0, 0, 0
Debian:13linux0, 0, 0
Debian:12linux0, 0, 0
Debian:14linux0, 0, 0

Timeline

  • Oct 10, 2013 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›