Vulnerability Details CVE-2013-5180
The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of these values, related to a compiler-optimization issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.8%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2013-5180
-
cpe:2.3:o:apple:mac_os_x:10.8.0
-
cpe:2.3:o:apple:mac_os_x:10.8.1
-
cpe:2.3:o:apple:mac_os_x:10.8.2
-
cpe:2.3:o:apple:mac_os_x:10.8.3
-
cpe:2.3:o:apple:mac_os_x:10.8.4
-
cpe:2.3:o:apple:mac_os_x:10.8.5