FreeBSD : pycrypto -- PRNG reseed race condition (c0f122e2-3897-11e3-a084-3c970e169bc2)

Medium Nessus Plugin ID 70517


The remote FreeBSD host is missing one or more security-related updates.


Dwayne Litzenberger reports :

In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator (PRNG) exhibits a race condition that may cause it to generate the same 'random' output in multiple processes that are forked from each other. Depending on the application, this could reveal sensitive information or cryptographic keys to remote attackers.


Update the affected packages.

See Also

Plugin Details

Severity: Medium

ID: 70517

File Name: freebsd_pkg_c0f122e2389711e3a0843c970e169bc2.nasl

Version: $Revision: 1.3 $

Type: local

Published: 2013/10/20

Modified: 2013/10/29

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:py26-pycrypto, p-cpe:/a:freebsd:freebsd:py27-pycrypto, p-cpe:/a:freebsd:freebsd:py31-pycrypto, p-cpe:/a:freebsd:freebsd:py32-pycrypto, p-cpe:/a:freebsd:freebsd:py33-pycrypto, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2013/10/19

Vulnerability Publication Date: 2013/10/17

Reference Information

CVE: CVE-2013-1445