CVE-2013-5180
24.10.2013, 03:48
The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of these values, related to a compiler-optimization issue.Enginsight
Vendor | Product | Version |
---|---|---|
apple | mac_os_x | 𝑥 ≤ 10.8.5 |
apple | mac_os_x | 10.8.0 |
apple | mac_os_x | 10.8.1 |
apple | mac_os_x | 10.8.2 |
apple | mac_os_x | 10.8.3 |
apple | mac_os_x | 10.8.4 |
apple | mac_os_x | 10.8.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration