CVE-2016-6313
libgcrypt: PRNG output is predictable
Loading…
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · August 17, 2016
Updated · November 21, 2025
Description
A design flaw was found in the libgcrypt PRNG (Pseudo-Random Number Generator). An attacker able to obtain the first 580 bytes of the PRNG output could predict the following 20 bytes.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 4.8CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 · 4AV:N/AC:H/Au:N/C:P/I:P/A:N
CWE not specified