CVE Vulnerabilities

CVE-2020-29505

Insufficient Entropy

Published: Jul 11, 2022 | Modified: Oct 28, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key Management Error Vulnerability.

Weakness

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Affected Software

Name Vendor Start Version End Version
Bsafe_crypto-c-micro-edition Dell * 4.1.5 (excluding)
Bsafe_micro-edition-suite Dell * 4.5.2 (excluding)

Potential Mitigations

References