CVE-2013-2213

MEDIUM

KDE Paste Applet >=4.10.5 - Use of a Broken or Risky Cryptographic Algorithm

Title source: llm
STIX 2.1

Description

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output.

References (3)

Core 3
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=978243
Mailing List, Third Party Advisory x_refsource_misc
http://openwall.com/lists/oss-security/2013/06/13/1
Mailing List, Third Party Advisory x_refsource_misc
http://openwall.com/lists/oss-security/2013/06/26/2

Scores

CVSS v3 5.5
EPSS 0.0003
EPSS Percentile 7.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-327
Status published
Products (1)
kde/paste_applet 4.10.5
Published Feb 11, 2020
Tracked Since Feb 18, 2026