CVE-2013-1900

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers…

published April 4, 2013

CVSS
—
EPSS
5%
Percentile
91.4
In the wild
Unconfirmed
What it is

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04511 · 91.4th percentile
Published
2013-04-04T17:00Z
EPSS history
Timeline
  • 04 APR 17:00Z
    PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers…
    cvelistv5