nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers
In versions of `nanorand` prior to 0.5.1, `RandomGen` implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an `as` conversion. This often manifested as RNGs returning nothing but 0, including the cryptographically secure `ChaCha` random number generator..
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-35926US | critical9.8OT elevated | — | ||
An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishand… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan