CVE-2013-4345: Fedoraproject Fedora

Medium severity, CVSS 5.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

Affected products

• Fedoraproject Fedora: version 18 only; version 19 only
• Linux Linux Kernel: up to and including 3.11.4; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …
• Red Hat Enterprise Linux: version 5 only; version 6.0 only
• Red Hat Enterprise Mrg: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only

Published 2013-10-10. Last modified 2026-06-16.