First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2013-5180

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of these values, related to a compiler-optimization issue.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Oct 24, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-51814.3The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified servers that support C CVE-2013-51825.0Mail in Apple Mac OS X before 10.9 allows remote attackers to spoof the existence of a cryptographic signature for an e-mail message by usin CVE-2013-51832.6Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows CVE-2013-51845.7The kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing of multicast Wi-Fi packets, which allows r CVE-2013-51854.3The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf configuration setting, wh CVE-2013-51862.1Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power assertions, which allows p CVE-2013-51871.9The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and inst CVE-2013-51884.0The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a CVE-2013-51895.8Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows conte CVE-2013-51904.3Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allows remote attackers t CVE-2013-51912.1The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveraging access to the Guest CVE-2013-51924.9The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a request with a cra

CVE-2013-5180: Medium severity, CVSS 4.3 | Vulnix