The srandomdev function in Libc in Apple Mac OS X prior to 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent malicious users to defeat cryptographic protection mechanisms by leveraging knowledge of these values, related to a compiler-optimization issue.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apple mac os x 10.8.1 |
||
apple mac os x |
||
apple mac os x 10.8.2 |
||
apple mac os x 10.8.3 |
||
apple mac os x 10.8.4 |
||
apple mac os x 10.8.5 |
||
apple mac os x 10.8.0 |
Vulmon