CVE-2021-3538

State: Published
Severity: Not scored
Published: Jun 2, 2021
Updated: Aug 3, 2024
Reserved: May 5, 2021

Description

A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker.

Scores

The record has no CVSS score.

Weaknesses

CWE-338

Affected Products

Product	Versions
satori/go.uuidn/a	All satori/go.uuid versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1954376
https://github.com/satori/go.uuid/issues/73
https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSATORIGOUUID-72488

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.