1184 matches found
CVE-2013-1445
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...
Race condition
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...
CVE-2013-1445
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...
PYSEC-2013-29
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...
CVE-2013-1445
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...
CVE-2013-1445
CVE-2013-1445 affects PyCrypto’s Crypto.Random.atfork PRNG reseeding: a race condition allows a child process to access the PRNG within the same rate-limit period, potentially exposing sensitive information. Root cause is inadequate reseeding before forking in PyCrypto before 2.6.1. Affected: PyC...
CVE-2013-1445
Removed by vendor...
CVE-2013-1445: Undefined Security Weakness
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...
PT-2013-3141
Name of the Vulnerable Software and Affected Versions PyCrypto versions prior to 2.6.1 Description The issue is related to the Crypto.Random.atfork function, which does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it. This makes it easier f...
ProSoft Technology RadioLinx ControlScape PRNG vulnerability
Industrial automation software used worldwide to create and configure wireless radios that connect devices in environments such as oil and gas is vulnerable to attack by a hacker armed with an antenna from as far as 30 miles away. Though the vulnerability in the ProSoft Technology RadioLinx...
FreeBSD : pycrypto -- PRNG reseed race condition (c0f122e2-3897-11e3-a084-3c970e169bc2)
Dwayne Litzenberger reports : In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator PRNG exhibits a race condition that may cause it to generate the same 'random' output in multiple processes that are forked from each other. Depending on the application, this could reveal...
Debian DSA-2781-1 : python-crypto - PRNG not correctly reseeded in some situations
A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...
[SECURITY] [DSA 2781-1] python-crypto security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2781-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez October 18, 2013 http://www.debian.org/security/faq -...
/Dev/Random PRNG in Linux Questioned
The sanctity of the dev/random random number generator used in the Linux kernel has been a hot-button issue for more than a month. A petition posted to change.org in September to remove RdRand from dev/random, for example, was met with fury from Linus Torvalds who called the developer who posted ...
Debian Security Advisory DSA 2781-1 (python-crypto - PRNG not correctly reseeded in some situations)
A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...
pycrypto -- PRNG reseed race condition
Dwayne Litzenberger reports: In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator PRNG exhibits a race condition that may cause it to generate the same 'random' output in multiple processes that are forked from each other. Depending on the application, this could reveal...
DSA-2781-1 python-crypto - PRNG not correctly reseeded in some situations
Bulletin has no description...
ProSoft RadioLinx ControlScape PRNG Weakness
Binary data scadaradiolinxcontrolscape600040.nbin...
UBUNTU-CVE-2013-4345
Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the...
