PT-2013-1372 · Nist · Dual Ec Drbg

🗓️ 11 Oct 2013 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Dual EC DRBG vulnerability: Q constants may enable attacks; no fix available.

Reporter	Title	Published	Views	Family All 17
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
CVE	CVE-2007-6755	11 Oct 201322:00	–	cve
Cvelist	CVE-2007-6755	11 Oct 201322:00	–	cvelist
Debian CVE	CVE-2007-6755	11 Oct 201322:00	–	debiancve
EUVD	EUVD-2007-6711	7 Oct 202500:30	–	euvd
NVD	CVE-2007-6755	11 Oct 201322:55	–	nvd
OSV	DEBIAN-CVE-2007-6755	11 Oct 201322:55	–	osv
Prion	Design/Logic Flaw	11 Oct 201322:55	–	prion
Prion	Default configuration	17 Jun 201415:55	–	prion
Prion	Code injection	17 Jun 201415:55	–	prion

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2007-6755
osv	www.osv.dev/vulnerability/CVE-2007-6755
security-tracker	www.security-tracker.debian.org/tracker/CVE-2007-6755
rump2007	www.rump2007.cr.yp.to/15-shumow.pdf
threatpost	www.threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect
arstechnica	www.arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers
stream	www.stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655
blog	www.blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html
schneier	www.schneier.com/blog/archives/2007/11/the_strange_sto.html
blog	www.blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html

01 Nov 2022 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 25.8

EPSS0.0033

dual elliptic curve deterministic random bit generator q constants skeleton key values cryptographic protections no fix available