| Package | Affected versions | Patched versions |
|---|---|---|
| classpath | = 0.10= 0.11= 0.12= 0.13= 0.14= 0.15= 0.16= 0.17= 0.18= 0.19= 0.20= 0.6= 0.7= 0.8= 0.9= 0.90= 0.91= 0.92= 0.93= 0.95= 0.96= 0.96.1= 0.97= 0.97.1≤ 0.97.2 |
The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated against DSA private keys.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free