Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-3tpx-rnju-w3dw
Summary
golang.org/x/crypto/salsa20/salsa uses insufficiently random values
An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto, before 2019-03-20. A flaw was found in the amd64 implementation of golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.

### Specific Go Packages Affected
golang.org/x/crypto/salsa20/salsa
Aliases
0
alias CVE-2019-11840
1
alias GHSA-r5c5-pr8j-pfp7
Fixed_packages
0
url pkg:deb/debian/golang-go.crypto@1:0.0~git20200221.2aa609c-1?distro=trixie
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20200221.2aa609c-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20200221.2aa609c-1%3Fdistro=trixie
1
url pkg:deb/debian/golang-go.crypto@1:0.0~git20201221.eec23a3-1
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20201221.eec23a3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n1h-e2p4-9yhs
1
vulnerability VCID-cmts-6kz4-zkh8
2
vulnerability VCID-et4d-ak3r-1bfa
3
vulnerability VCID-hu5a-ewvg-6ya7
4
vulnerability VCID-jwxs-gteb-kfg5
5
vulnerability VCID-jzn6-bzzf-nugp
6
vulnerability VCID-mn45-w3s3-syej
7
vulnerability VCID-n34c-71wq-s3e4
8
vulnerability VCID-sty6-gwh1-hbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20201221.eec23a3-1
2
url pkg:deb/debian/golang-go.crypto@1:0.0~git20201221.eec23a3-1?distro=trixie
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20201221.eec23a3-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1n1h-e2p4-9yhs
1
vulnerability VCID-cmts-6kz4-zkh8
2
vulnerability VCID-et4d-ak3r-1bfa
3
vulnerability VCID-hu5a-ewvg-6ya7
4
vulnerability VCID-jwxs-gteb-kfg5
5
vulnerability VCID-jzn6-bzzf-nugp
6
vulnerability VCID-mn45-w3s3-syej
7
vulnerability VCID-n34c-71wq-s3e4
8
vulnerability VCID-sty6-gwh1-hbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20201221.eec23a3-1%3Fdistro=trixie
3
url pkg:deb/debian/golang-go.crypto@1:0.4.0-1?distro=trixie
purl pkg:deb/debian/golang-go.crypto@1:0.4.0-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cmts-6kz4-zkh8
1
vulnerability VCID-hu5a-ewvg-6ya7
2
vulnerability VCID-jwxs-gteb-kfg5
3
vulnerability VCID-jzn6-bzzf-nugp
4
vulnerability VCID-mn45-w3s3-syej
5
vulnerability VCID-sty6-gwh1-hbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.4.0-1%3Fdistro=trixie
4
url pkg:deb/debian/golang-go.crypto@1:0.25.0-1?distro=trixie
purl pkg:deb/debian/golang-go.crypto@1:0.25.0-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cmts-6kz4-zkh8
1
vulnerability VCID-hu5a-ewvg-6ya7
2
vulnerability VCID-jwxs-gteb-kfg5
3
vulnerability VCID-mn45-w3s3-syej
4
vulnerability VCID-sty6-gwh1-hbcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.25.0-1%3Fdistro=trixie
5
url pkg:deb/debian/golang-go.crypto@1:0.47.0-1?distro=trixie
purl pkg:deb/debian/golang-go.crypto@1:0.47.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.47.0-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/golang-go.crypto@0.0~hg190-1
purl pkg:deb/debian/golang-go.crypto@0.0~hg190-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37zk-9fax-v7e1
1
vulnerability VCID-3tpx-rnju-w3dw
2
vulnerability VCID-andp-4snd-rbbt
3
vulnerability VCID-t5dk-qg2g-3qhp
4
vulnerability VCID-zvd3-3b1h-77ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@0.0~hg190-1
1
url pkg:deb/debian/golang-go.crypto@1:0.0~git20150608-1
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20150608-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37zk-9fax-v7e1
1
vulnerability VCID-3tpx-rnju-w3dw
2
vulnerability VCID-andp-4snd-rbbt
3
vulnerability VCID-t5dk-qg2g-3qhp
4
vulnerability VCID-zvd3-3b1h-77ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20150608-1
2
url pkg:deb/debian/golang-go.crypto@1:0.0~git20161012.0.5f31782-1~bpo8%2B1
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20161012.0.5f31782-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37zk-9fax-v7e1
1
vulnerability VCID-3tpx-rnju-w3dw
2
vulnerability VCID-andp-4snd-rbbt
3
vulnerability VCID-t5dk-qg2g-3qhp
4
vulnerability VCID-zvd3-3b1h-77ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20161012.0.5f31782-1~bpo8%252B1
3
url pkg:deb/debian/golang-go.crypto@1:0.0~git20161012.0.5f31782-1
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20161012.0.5f31782-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37zk-9fax-v7e1
1
vulnerability VCID-3tpx-rnju-w3dw
2
vulnerability VCID-andp-4snd-rbbt
3
vulnerability VCID-t5dk-qg2g-3qhp
4
vulnerability VCID-zvd3-3b1h-77ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20161012.0.5f31782-1
4
url pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%2BREALLY.0.0~git20161012.0.5f31782-1~bpo8%2B1
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%2BREALLY.0.0~git20161012.0.5f31782-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37zk-9fax-v7e1
1
vulnerability VCID-3tpx-rnju-w3dw
2
vulnerability VCID-andp-4snd-rbbt
3
vulnerability VCID-t5dk-qg2g-3qhp
4
vulnerability VCID-zvd3-3b1h-77ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%252BREALLY.0.0~git20161012.0.5f31782-1~bpo8%252B1
5
url pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%2BREALLY.0.0~git20161012.0.5f31782-1
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%2BREALLY.0.0~git20161012.0.5f31782-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37zk-9fax-v7e1
1
vulnerability VCID-3tpx-rnju-w3dw
2
vulnerability VCID-andp-4snd-rbbt
3
vulnerability VCID-zvd3-3b1h-77ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%252BREALLY.0.0~git20161012.0.5f31782-1
6
url pkg:deb/debian/golang-go.crypto@1:0.0~git20181203.505ab14-1
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20181203.505ab14-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-37zk-9fax-v7e1
1
vulnerability VCID-3tpx-rnju-w3dw
2
vulnerability VCID-andp-4snd-rbbt
3
vulnerability VCID-zvd3-3b1h-77ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-go.crypto@1:0.0~git20181203.505ab14-1
7
url pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.374-1.git.1675.738abcc?arch=el7
purl pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.374-1.git.1675.738abcc?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.374-1.git.1675.738abcc%3Farch=el7
8
url pkg:rpm/redhat/atomic-openshift@3.11.374-1.git.0.ebd3ee9?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.11.374-1.git.0.ebd3ee9?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
1
vulnerability VCID-vctf-a4t5-q7a2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.11.374-1.git.0.ebd3ee9%3Farch=el7
9
url pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.374-1.git.0.2996f62?arch=el7
purl pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.374-1.git.0.2996f62?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.374-1.git.0.2996f62%3Farch=el7
10
url pkg:rpm/redhat/atomic-openshift-descheduler@3.11.374-1.git.299.f128e96?arch=el7
purl pkg:rpm/redhat/atomic-openshift-descheduler@3.11.374-1.git.299.f128e96?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-descheduler@3.11.374-1.git.299.f128e96%3Farch=el7
11
url pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.374-1.git.481.e6a880c?arch=el7
purl pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.374-1.git.481.e6a880c?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.374-1.git.481.e6a880c%3Farch=el7
12
url pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.374-1.git.53.9df25a9?arch=el7
purl pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.374-1.git.53.9df25a9?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.374-1.git.53.9df25a9%3Farch=el7
13
url pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.374-1.git.263.28335fb?arch=el7
purl pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.374-1.git.263.28335fb?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.374-1.git.263.28335fb%3Farch=el7
14
url pkg:rpm/redhat/atomic-openshift-service-idler@3.11.374-1.git.15.523a1f7?arch=el7
purl pkg:rpm/redhat/atomic-openshift-service-idler@3.11.374-1.git.15.523a1f7?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-service-idler@3.11.374-1.git.15.523a1f7%3Farch=el7
15
url pkg:rpm/redhat/atomic-openshift-web-console@3.11.374-1.git.647.9e78d83?arch=el7
purl pkg:rpm/redhat/atomic-openshift-web-console@3.11.374-1.git.647.9e78d83?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-web-console@3.11.374-1.git.647.9e78d83%3Farch=el7
16
url pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.374-1.git.439.966c536?arch=el7
purl pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.374-1.git.439.966c536?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.374-1.git.439.966c536%3Farch=el7
17
url pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.374-1.git.0.3abd2a5?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.374-1.git.0.3abd2a5?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.374-1.git.0.3abd2a5%3Farch=el7
18
url pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.374-1.git.1062.490d6d5?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.374-1.git.1062.490d6d5?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.374-1.git.1062.490d6d5%3Farch=el7
19
url pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.374-1.git.5026.29379c4?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.374-1.git.5026.29379c4?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.374-1.git.5026.29379c4%3Farch=el7
20
url pkg:rpm/redhat/openshift@4.3.0-202001131753.git.0.0aee6a8?arch=el7
purl pkg:rpm/redhat/openshift@4.3.0-202001131753.git.0.0aee6a8?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift@4.3.0-202001131753.git.0.0aee6a8%3Farch=el7
21
url pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.374-1.git.218.9cf7939?arch=el7
purl pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.374-1.git.218.9cf7939?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.374-1.git.218.9cf7939%3Farch=el7
22
url pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.374-1.git.379.80bd08f?arch=el7
purl pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.374-1.git.379.80bd08f?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3tpx-rnju-w3dw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.374-1.git.379.80bd08f%3Farch=el7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-11840
reference_id
reference_type
scores
0
value 0.02086
scoring_system epss
scoring_elements 0.84038
published_at 2026-04-21T12:55:00Z
1
value 0.02086
scoring_system epss
scoring_elements 0.84037
published_at 2026-04-18T12:55:00Z
2
value 0.02086
scoring_system epss
scoring_elements 0.84035
published_at 2026-04-16T12:55:00Z
3
value 0.02086
scoring_system epss
scoring_elements 0.84011
published_at 2026-04-13T12:55:00Z
4
value 0.02086
scoring_system epss
scoring_elements 0.84015
published_at 2026-04-12T12:55:00Z
5
value 0.02086
scoring_system epss
scoring_elements 0.84021
published_at 2026-04-11T12:55:00Z
6
value 0.02086
scoring_system epss
scoring_elements 0.84006
published_at 2026-04-09T12:55:00Z
7
value 0.02086
scoring_system epss
scoring_elements 0.83999
published_at 2026-04-08T12:55:00Z
8
value 0.02086
scoring_system epss
scoring_elements 0.83976
published_at 2026-04-07T12:55:00Z
9
value 0.02705
scoring_system epss
scoring_elements 0.85853
published_at 2026-04-04T12:55:00Z
10
value 0.02705
scoring_system epss
scoring_elements 0.85835
published_at 2026-04-02T12:55:00Z
11
value 0.02705
scoring_system epss
scoring_elements 0.85824
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-11840
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1691529
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1691529
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11840
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11840
4
reference_url https://github.com/golang/go
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/golang/go
5
reference_url https://github.com/golang/go/issues/30965
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/golang/go/issues/30965
6
reference_url https://go.dev/cl/168406
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://go.dev/cl/168406
7
reference_url https://go.dev/issue/30965
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://go.dev/issue/30965
8
reference_url https://go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113d
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113d
9
reference_url https://groups.google.com/forum/#!msg/golang-announce/tjyNcJxb2vQ/n0NRBziSCAAJ
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/golang-announce/tjyNcJxb2vQ/n0NRBziSCAAJ
10
reference_url https://groups.google.com/g/golang-announce/c/tjyNcJxb2vQ/m/n0NRBziSCAAJ
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/golang-announce/c/tjyNcJxb2vQ/m/n0NRBziSCAAJ
11
reference_url https://lists.debian.org/debian-lts-announce/2019/06/msg00029.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2019/06/msg00029.html
12
reference_url https://lists.debian.org/debian-lts-announce/2020/10/msg00014.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/10/msg00014.html
13
reference_url https://lists.debian.org/debian-lts-announce/2020/11/msg00016.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/11/msg00016.html
14
reference_url https://lists.debian.org/debian-lts-announce/2020/11/msg00030.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/11/msg00030.html
15
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00015.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/01/msg00015.html
16
reference_url https://lists.debian.org/debian-lts-announce/2023/06/msg00017.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/06/msg00017.html
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-11840
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-11840
18
reference_url https://pkg.go.dev/vuln/GO-2022-0209
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://pkg.go.dev/vuln/GO-2022-0209
19
reference_url https://access.redhat.com/errata/RHSA-2021:0079
reference_id RHSA-2021:0079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0079
Weaknesses
0
cwe_id 330
name Use of Insufficiently Random Values
description The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-3tpx-rnju-w3dw