CVE-2013-7372
Published · Updated
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 2.4%
from disclosure to weapon
Published on NVDApr 29
VulnCheckAug 14
exploitation probability
2.4%top 16% of all CVEs
observed exploitation
yesVulnCheck
The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture (JCA) in Android before 4.4 and other products, when no seed is provided by the user, uses an incorrect offset value, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the resulting PRNG predictability, as exploited in the wild against Bitcoin wallet applications in August 2013.
Affected products
n/a · n/aReferences
http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.htmlhttps://android.googlesource.com/platform/libcore/+/kitkat-release/luni/src/main/java/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.javahttps://bitcoin.org/en/alert/2013-08-11-androidhttp://www.nds.rub.de/media/nds/veroeffentlichungen/2013/03/25/paper_2.pdf