What’s Vulnerable › Vulnerabilities

CVE-2020-28924

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-11-19 · updated 2026-06-17
• Weakness: CWE-331

Description

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limits the entropy of the passwords enormously. These passwords are often used in the crypt backend for encryption of data. It would be possible to make a dictionary of all possible passwords with about 38 million entries per password length. This would make decryption of secret material possible with a plausible amount of effort. NOTE: all passwords generated by affected versions should be changed.

Affected products

• Fedoraproject Fedora: 33
• rclone: before 1.53.3 — fixed in 1.53.3

How to fix

Upgrade to a fixed version: rclone 1.53.3. Check the vendor advisory for mitigations.

References

• https://github.com/rclone/rclone/issues/4783
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJIFT24Q6EFXLQZ24AER2QGFFZLMIPCD/
• https://rclone.org/downloads/
• https://security.gentoo.org/glsa/202107-14
• https://github.com/rclone/rclone/issues/4783
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJIFT24Q6EFXLQZ24AER2QGFFZLMIPCD/
• https://rclone.org/downloads/
• https://security.gentoo.org/glsa/202107-14

Get alerted when CVE-2020-28924 or the next vulnerability affects your stack