In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin Fix: The fix is designed to correctly implement the key generation according to FIPS standard.
Metrics
Affected Vendors & Products
References
History
Wed, 18 Dec 2024 20:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Google
Google android |
|
CPEs | cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:* cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:* |
|
Vendors & Products |
Google
Google android |
Tue, 03 Dec 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-331 | |
Metrics |
cvssV3_1
|
Mon, 02 Dec 2024 21:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin Fix: The fix is designed to correctly implement the key generation according to FIPS standard. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2024-12-02T21:30:27.265Z
Updated: 2024-12-03T15:07:45.180Z
Reserved: 2018-04-05T00:00:00.000Z
Link: CVE-2018-9426
Vulnrichment
Updated: 2024-12-03T15:07:07.293Z
NVD
Status : Analyzed
Published: 2024-12-02T22:15:08.917
Modified: 2024-12-18T20:21:52.560
Link: CVE-2018-9426
Redhat
No data.