NVD

Id
38036  
Name
CVE-2013-1900  
Description
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-04-04  
Modified Date
2014-01-03  
Seq
2013-1900  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194313 38036 CVE-2013-1900 APPLE-SA-2013-09-12-1  View
194314 38036 CVE-2013-1900 APPLE-SA-2013-09-17-1  View
194315 38036 CVE-2013-1900 FEDORA-2013-5000  View
194316 38036 CVE-2013-1900 FEDORA-2013-6148  View
194317 38036 CVE-2013-1900 openSUSE-SU-2013:0627  View
194318 38036 CVE-2013-1900 openSUSE-SU-2013:0628  View
194319 38036 CVE-2013-1900 SUSE-SU-2013:0633  View
194320 38036 CVE-2013-1900 openSUSE-SU-2013:0635  View
194321 38036 CVE-2013-1900 RHSA-2013:1475  View
194322 38036 CVE-2013-1900 http://support.apple.com/kb/HT5880  View
194323 38036 CVE-2013-1900 http://support.apple.com/kb/HT5892  View
194324 38036 CVE-2013-1900 DSA-2657  View
194325 38036 CVE-2013-1900 DSA-2658  View
194326 38036 CVE-2013-1900 MDVSA-2013:142  View
194327 38036 CVE-2013-1900 http://www.postgresql.org/about/news/1456/  View
194328 38036 CVE-2013-1900 http://www.postgresql.org/docs/current/static/release-8-4-17.html  View
194329 38036 CVE-2013-1900 http://www.postgresql.org/docs/current/static/release-9-0-13.html  View
194330 38036 CVE-2013-1900 http://www.postgresql.org/docs/current/static/release-9-1-9.html  View
194331 38036 CVE-2013-1900 http://www.postgresql.org/docs/current/static/release-9-2-4.html  View
194332 38036 CVE-2013-1900 USN-1789-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20567 JVNDB-2013-002142 PostgreSQL における脆弱性 PostgreSQL は、OpenSSL を使用する場合、不十分な乱数を生成するため、不特定の影響を受ける脆弱性が存在します。 CVE-2013-1900 61842 CVE-2013-1900 38036 8.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002142.html 2013-04-04 2014-03-06 View