Beveiligingsadvies

CVE-2013-5180

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-10-24 01:00:00
Laatst bijgewerkt 2024-09-17 03:58:41
Toegewezen door apple
CVSS-score geen score
Status PUBLISHED

Beschrijving

The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of these values, related to a compiler-optimization issue.