Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h5cf-h82c-8jhv

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.

EPSS

Процентиль: 82%
0.01753
Низкий

Связанные уязвимости

ubuntu
около 17 лет назад

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.

redhat
около 17 лет назад

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.

nvd
около 17 лет назад

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.

debian
около 17 лет назад

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earl ...

EPSS

Процентиль: 82%
0.01753
Низкий