CVE-2013-2213

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output.

• CWE-327

• http://openwall.com/lists/oss-security/2013/06/13/1Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2013/06/26/2Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=978243Exploit, Issue Tracking, Third Party Advisory
• http://openwall.com/lists/oss-security/2013/06/13/1Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2013/06/26/2Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=978243Exploit, Issue Tracking, Third Party Advisory

Published

Feb 11, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2207pt_chown in GNU C Library (aka glibc or libc6) before 2.18 d…
• CVE-2013-2208tpp 1.3.1 allows remote attackers to execute arbitrary comma…
• CVE-2013-2209Cross-site scripting (XSS) vulnerability in the auto-complet…
• CVE-2013-2210Heap-based buffer overflow in the XML Signature Reference fu…
• CVE-2013-2211The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.…
• CVE-2013-2212The vmx_set_uc_mode function in Xen 3.3 through 4.3, when di…
• CVE-2013-2214status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5…
• CVE-2013-2215Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-2216Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-2217cache.py in Suds 0.4, when tempdir is set to None, allows lo…
• CVE-2013-2218Double free vulnerability in the virConnectListAllInterfaces…
• CVE-2013-2219The Red Hat Directory Server before 8.2.11-13 and 389 Direct…