Lucene search
+L

4 matches found

OSV
OSV
•added 2021/08/25 8:50 p.m.•39 views

GHSA-M9M5-CG5H-R582 Improper random number generation in nanorand

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion. This often manifested as RNGs returning nothing but 0, including the...

5.1CVSS9.4AI score0.01534EPSS
SaveExploits0References5
OSV
OSV
•added 2020/12/09 12:00 p.m.•65 views

RUSTSEC-2020-0089 nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion. This often manifested as RNGs returning nothing but 0, including the...

5.1CVSS9.4AI score0.01534EPSS
SaveExploits0References3
RustSec
RustSec
•added 2020/12/09 12:00 p.m.•35 views

nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion. This often manifested as RNGs returning nothing but 0, including the...

9.8CVSS2.8AI score0.01534EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•3 views

PT-2020-17558

Name of the Vulnerable Software and Affected Versions nanorand versions prior to 0.5.1 Description An issue in the nanorand crate caused random number generators, including the cryptographically secure ChaCha, to return all zeroes due to mishandled integer truncation. This occurred because the...

9.8CVSS0.01534EPSS
SaveExploits0References9
Rows per page
Query Builder