Description

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."

Remediation

References

CVE-2013-1900

Related Vulnerabilities

MySQL Other Vulnerability (CVE-2006-1516)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5273)

PostgreSQL Incorrect Authorization Vulnerability (CVE-2018-10925)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2335)

Django CVE-2024-24680 Vulnerability (CVE-2024-24680)

Severity

High

Classification

CVE-2013-1900

Tags

Missing Update Known Vulnerabilities