CVE-2013-2213

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-02-11 · updated 2026-06-16
Weakness: CWE-327

Description

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output.

Affected products

KDE Paste Applet: from 4.10.5 (excl.)

References

http://openwall.com/lists/oss-security/2013/06/13/1
http://openwall.com/lists/oss-security/2013/06/26/2
https://bugzilla.redhat.com/show_bug.cgi?id=978243
http://openwall.com/lists/oss-security/2013/06/13/1
http://openwall.com/lists/oss-security/2013/06/26/2
https://bugzilla.redhat.com/show_bug.cgi?id=978243

Get alerted when CVE-2013-2213 or the next vulnerability affects your stack