NVD

Id
42095  
Name
CVE-2013-7373  
Description
Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-04-29  
Modified Date
2014-04-30  
Seq
2013-7373  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212432 42095 CVE-2013-7373 http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html  View
212433 42095 CVE-2013-7373 http://emboss.github.io/blog/2013/08/21/openssl-prng-is-not-really-fork-safe/  View
212434 42095 CVE-2013-7373 [openssl-dev] 20110415 recycled pids causes PRNG to repeat  View
212435 42095 CVE-2013-7373 [openssl-dev] 20110416 Re: recycled pids causes PRNG to repeat  View
212436 42095 CVE-2013-7373 http://www.reddit.com/r/Android/comments/1k6f03/due_to_a_serious_encryptionrng_flaw_in_android/cblvum5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24810 JVNDB-2013-006385 Android における暗号保護メカニズムを破られる脆弱性 Android は、OpenSSL の PRNG シーディングを適切に配置しないため、暗号保護メカニズムを破られる脆弱性が存在します。 CVE-2013-7373 67315 CVE-2013-7373 42095 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006385.html 2013-08-14 2014-05-02 View