CVE-2021-3538

    Dashboard / Vulnerabilities / CVE-2021-3538

    CVE-2021-3538

    Published: 2 Jun 2021Last Modified: 12 Oct 2024

    Summary:

    Details: A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.

    References: https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSATORIGOUUID-72488, https://bugzilla.redhat.com/show_bug.cgi?id=1954376, https://github.com/satori/go.uuid/issues/73

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -f58768cc1a7a7e77a3bd49e98cdd21419399b6a3

    Affected versions

    v1.0.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-3538 | CVE-DB