Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-1900
HistoryApr 04, 2013 - 5:55 p.m.

CVE-2013-1900

2013-04-0417:55:00
CWE-189
[email protected]
web.nvd.nist.gov
6

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

9

Confidence

High

EPSS

0.008

Percentile

82.1%

JSON

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the “contrib/pgcrypto functions.”

Affected configurations

Nvd
Node
postgresqlpostgresqlMatch9.2
OR
postgresqlpostgresqlMatch9.2.1
OR
postgresqlpostgresqlMatch9.2.2
OR
postgresqlpostgresqlMatch9.2.3
Node
postgresqlpostgresqlMatch9.1
OR
postgresqlpostgresqlMatch9.1.1
OR
postgresqlpostgresqlMatch9.1.2
OR
postgresqlpostgresqlMatch9.1.3
OR
postgresqlpostgresqlMatch9.1.4
OR
postgresqlpostgresqlMatch9.1.5
OR
postgresqlpostgresqlMatch9.1.6
OR
postgresqlpostgresqlMatch9.1.7
OR
postgresqlpostgresqlMatch9.1.8
Node
postgresqlpostgresqlMatch9.0
OR
postgresqlpostgresqlMatch9.0.1
OR
postgresqlpostgresqlMatch9.0.2
OR
postgresqlpostgresqlMatch9.0.3
OR
postgresqlpostgresqlMatch9.0.4
OR
postgresqlpostgresqlMatch9.0.5
OR
postgresqlpostgresqlMatch9.0.6
OR
postgresqlpostgresqlMatch9.0.7
OR
postgresqlpostgresqlMatch9.0.8
OR
postgresqlpostgresqlMatch9.0.9
OR
postgresqlpostgresqlMatch9.0.10
OR
postgresqlpostgresqlMatch9.0.11
OR
postgresqlpostgresqlMatch9.0.12
Node
postgresqlpostgresqlMatch8.4
OR
postgresqlpostgresqlMatch8.4.1
OR
postgresqlpostgresqlMatch8.4.2
OR
postgresqlpostgresqlMatch8.4.3
OR
postgresqlpostgresqlMatch8.4.4
OR
postgresqlpostgresqlMatch8.4.5
OR
postgresqlpostgresqlMatch8.4.6
OR
postgresqlpostgresqlMatch8.4.7
OR
postgresqlpostgresqlMatch8.4.8
OR
postgresqlpostgresqlMatch8.4.9
OR
postgresqlpostgresqlMatch8.4.10
OR
postgresqlpostgresqlMatch8.4.11
OR
postgresqlpostgresqlMatch8.4.12
OR
postgresqlpostgresqlMatch8.4.13
OR
postgresqlpostgresqlMatch8.4.14
OR
postgresqlpostgresqlMatch8.4.15
OR
postgresqlpostgresqlMatch8.4.16
Node
canonicalubuntu_linuxMatch8.04-lts
OR
canonicalubuntu_linuxMatch10.04-lts
OR
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10
VendorProductVersionCPE
postgresqlpostgresql9.2cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*
postgresqlpostgresql9.2.1cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*
postgresqlpostgresql9.2.2cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*
postgresqlpostgresql9.2.3cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*
postgresqlpostgresql9.1cpe:2.3:a:postgresql:postgresql:9.1:*:*:*:*:*:*:*
postgresqlpostgresql9.1.1cpe:2.3:a:postgresql:postgresql:9.1.1:*:*:*:*:*:*:*
postgresqlpostgresql9.1.2cpe:2.3:a:postgresql:postgresql:9.1.2:*:*:*:*:*:*:*
postgresqlpostgresql9.1.3cpe:2.3:a:postgresql:postgresql:9.1.3:*:*:*:*:*:*:*
postgresqlpostgresql9.1.4cpe:2.3:a:postgresql:postgresql:9.1.4:*:*:*:*:*:*:*
postgresqlpostgresql9.1.5cpe:2.3:a:postgresql:postgresql:9.1.5:*:*:*:*:*:*:*
Rows per page:
1-10 of 481

References

Related

prion 1
veracode 1
postgresql 1
nessus 26
cve 1
openvas 29
ubuntucve 1
cvelist 1
centos 1
redhat 1
amazon 2
oraclelinux 1
suse 5
freebsd 1
debian 5
fedora 3
ubuntu 1
securityvulns 4
vmware 1
osv 4
gentoo 1
oracle 1
prion
prion
Code injection
2013-04-04 17:55:00
veracode
veracode
Weak Random Number Generator
2019-05-02 04:56:48
postgresql
postgresql
Vulnerability in contrib module (CVE-2013-1900)
2013-04-04 17:55:00
nessus
nessus
PostgreSQL 8.4 < 8.4.17 / 9.0 < 9.0.13 / 9.1 < 9.1.9 / 9.2 < 9.2.4 Predictable Random Number Generator
2013-04-08 00:00:00
CentOS 5 / 6 : postgresql / postgresql84 (CESA-2013:1475)
2013-10-30 00:00:00
Scientific Linux Security Update : postgresql and postgresql84 on SL5.x, SL6.x i386/x86_64 (20131029)
2013-10-31 00:00:00
cve
cve
CVE-2013-1900
2013-04-04 17:55:00
openvas
openvas
PostgreSQL Unspecified Vulnerability (Apr 2013) - Windows
2013-04-09 00:00:00
CentOS Update for postgresql84 CESA-2013:1475 centos5
2013-11-08 00:00:00
Oracle: Security Advisory (ELSA-2013-1475)
2015-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2013-1900
2013-04-04 00:00:00
cvelist
cvelist
CVE-2013-1900
2013-04-04 17:00:00
centos
centos
postgresql, postgresql84 security update
2013-10-29 20:28:29
redhat
redhat
(RHSA-2013:1475) Moderate: postgresql and postgresql84 security update
2013-10-29 00:00:00
amazon
amazon
Medium: postgresql8
2013-11-03 12:09:00
Critical: postgresql9
2013-04-04 11:49:00
oraclelinux
oraclelinux
postgresql and postgresql84 security update
2013-10-29 00:00:00
suse
suse
postgresql92: Various security fixes. Update to 9.2.4. (important)
2013-04-05 10:04:42
Security update for PostgreSQL (important)
2013-04-05 19:06:20
postgresql: security and bugfix update to 9.0.13 (important)
2013-04-08 07:04:30
freebsd
freebsd
PostgreSQL -- anonymous remote access data corruption vulnerability
2013-04-04 00:00:00
debian
debian
[BSA-080] Security Update for postgresql-9.1
2013-04-08 08:27:20
[SECURITY] [DSA 2658-1] postgresql-9.1 security update
2013-04-04 14:06:34
[SECURITY] [DSA 2657-1] postgresql-8.4 security update
2013-04-04 13:47:32
fedora
fedora
[SECURITY] Fedora 19 Update: postgresql-9.2.4-1.fc19
2013-04-20 19:59:46
[SECURITY] Fedora 18 Update: postgresql-9.2.4-1.fc18
2013-04-05 22:59:41
[SECURITY] Fedora 17 Update: postgresql-9.1.9-1.fc17
2013-04-05 23:11:53
ubuntu
ubuntu
PostgreSQL vulnerabilities
2013-04-04 00:00:00
securityvulns
securityvulns
PostgreSQL multiple security vulnerabilities
2013-04-08 00:00:00
[USN-1789-1] PostgreSQL vulnerabilities
2013-04-08 00:00:00
APPLE-SA-2013-09-12-1 OS X Mountain Lion v10.8.5 and Security Update 2013-004
2013-10-03 00:00:00
vmware
vmware
VMware vFabric Postgres security updates
2013-04-04 00:00:00
osv
osv
postgresql-9.1 - several
2013-04-04 00:00:00
libecpg6-32bit-9.5.4-1.2 on GA media
2024-06-15 00:00:00
postgresql94-9.4.10-1.1 on GA media
2024-06-15 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2014-08-29 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

9

Confidence

High

EPSS

0.008

Percentile

82.1%

JSON
Related for NVD:CVE-2013-1900
prion1veracode1postgresql1nessus26cve1openvas29ubuntucve1cvelist1centos1redhat1amazon2oraclelinux1suse5freebsd1debian5fedora3ubuntu1securityvulns4vmware1osv4gentoo1oracle1