CVE-2013-2213 Weak cryptography in KDE Paste Applet

Medium 5.5 Published 11 Feb 2020 Updated 6 Aug 2024

Attackers can predict random numbers in KDE Paste Applet due to weak PRNG, potentially bypassing cryptographic protections.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2013-2213?

CVE-2013-2213 is a medium-severity vulnerability in KDE Paste Applet, published on 11 Feb 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output.

Weakness: CWE-327

Which versions are affected by CVE-2013-2213?

It affects 1 product.

Products include Kde Paste Applet.

How do I fix CVE-2013-2213?

No fix has been published for CVE-2013-2213 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-2213 being exploited?

There is no known exploitation of CVE-2013-2213 in the wild and no public exploit code.

CVE-2013-2120 Weak cryptography in KDE Paste Applet High 8.4

Sources

Also known as GHSA-x3w8-63xm-cwmm.