CVE-2021-0131: Weak RNG
Published Jun 9, 2021
·Updated
Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.
Affected Software
219 affected components
Intel Secl-dc<3.3
Intel Xeon Bronze 3104
Intel Xeon Bronze 3106
Intel Xeon Bronze 3204
Intel Xeon Bronze 3206r
Intel Xeon Gold 5115
Intel Xeon Gold 5117
Intel Xeon Gold 5117f
Intel Xeon Gold 5118
Intel Xeon Gold 5119t
Intel Xeon Gold 5120
Intel Xeon Gold 5120t
Intel Xeon Gold 5122
Intel Xeon Gold 5215
Intel Xeon Gold 5215l
Intel Xeon Gold 5217
Intel Xeon Gold 5218
Intel Xeon Gold 5218b
Intel Xeon Gold 5218n
Intel Xeon Gold 5218r
Intel Xeon Gold 5218t
Intel Xeon Gold 5219y
Intel Xeon Gold 5220
Intel Xeon Gold 5220r
Intel Xeon Gold 5220s
Intel Xeon Gold 5220t
Intel Xeon Gold 5222
Intel Xeon Gold 5315y
Intel Xeon Gold 5317
Intel Xeon Gold 5318h
Intel Xeon Gold 5318n
Intel Xeon Gold 5318s
Intel Xeon Gold 5318y
Intel Xeon Gold 5320
Intel Xeon Gold 5320h
Intel Xeon Gold 5320t
Intel Xeon Gold 6122
Intel Xeon Gold 6126
Intel Xeon Gold 6126f
Intel Xeon Gold 6126t
Intel Xeon Gold 6128
Intel Xeon Gold 6129
Intel Xeon Gold 6130
Intel Xeon Gold 6130f
Intel Xeon Gold 6130h
Intel Xeon Gold 6130t
Intel Xeon Gold 6132
Intel Xeon Gold 6134
Intel Xeon Gold 6134m
Intel Xeon Gold 6135
Intel Xeon Gold 6136
Intel Xeon Gold 6137
Intel Xeon Gold 6138
Intel Xeon Gold 6138f
Intel Xeon Gold 6138p
Intel Xeon Gold 6138t
Intel Xeon Gold 6140
Intel Xeon Gold 6140m
Intel Xeon Gold 6142
Intel Xeon Gold 6142f
Intel Xeon Gold 6142m
Intel Xeon Gold 6143
Intel Xeon Gold 6144
Intel Xeon Gold 6146
Intel Xeon Gold 6148
Intel Xeon Gold 6148f
Intel Xeon Gold 6150
Intel Xeon Gold 6152
Intel Xeon Gold 6154
Intel Xeon Gold 6162
Intel Xeon Gold 6208u
Intel Xeon Gold 6209u
Intel Xeon Gold 6210u
Intel Xeon Gold 6212u
Intel Xeon Gold 6222
Intel Xeon Gold 6222v
Intel Xeon Gold 6226
Intel Xeon Gold 6226r
Intel Xeon Gold 6230
Intel Xeon Gold 6230n
Intel Xeon Gold 6230r
Intel Xeon Gold 6230t
Intel Xeon Gold 6234
Intel Xeon Gold 6238
Intel Xeon Gold 6238l
Intel Xeon Gold 6238t
Intel Xeon Gold 6240
Intel Xeon Gold 6240l
Intel Xeon Gold 6240r
Intel Xeon Gold 6240y
Intel Xeon Gold 6242
Intel Xeon Gold 6242r
Intel Xeon Gold 6244
Intel Xeon Gold 6246
Intel Xeon Gold 6246r
Intel Xeon Gold 6248
Intel Xeon Gold 6248r
Intel Xeon Gold 6250
Intel Xeon Gold 6250l
Intel Xeon Gold 6252
Intel Xeon Gold 6252n
Intel Xeon Gold 6254
Intel Xeon Gold 6256
Intel Xeon Gold 6258r
Intel Xeon Gold 6262
Intel Xeon Gold 6262v
Intel Xeon Gold 6269y
Intel Xeon Gold 6312u
Intel Xeon Gold 6314u
Intel Xeon Gold 6326
Intel Xeon Gold 6328h
Intel Xeon Gold 6328hl
Intel Xeon Gold 6330
Intel Xeon Gold 6330h
Intel Xeon Gold 6330n
Intel Xeon Gold 6334
Intel Xeon Gold 6336y
Intel Xeon Gold 6338
Intel Xeon Gold 6338n
Intel Xeon Gold 6338t
Intel Xeon Gold 6342
Intel Xeon Gold 6346
Intel Xeon Gold 6348
Intel Xeon Gold 6348h
Intel Xeon Gold 6354
Intel Xeon Platinum 8153
Intel Xeon Platinum 8156
Intel Xeon Platinum 8158
Intel Xeon Platinum 8160
Intel Xeon Platinum 8160f
Intel Xeon Platinum 8160h
Intel Xeon Platinum 8160m
Intel Xeon Platinum 8160t
Intel Xeon Platinum 8164
Intel Xeon Platinum 8165
Intel Xeon Platinum 8168
Intel Xeon Platinum 8170
Intel Xeon Platinum 8170m
Intel Xeon Platinum 8174
Intel Xeon Platinum 8176
Intel Xeon Platinum 8176f
Intel Xeon Platinum 8176m
Intel Xeon Platinum 8180
Intel Xeon Platinum 8180m
Intel Xeon Platinum 8253
Intel Xeon Platinum 8256
Intel Xeon Platinum 8260
Intel Xeon Platinum 8260l
Intel Xeon Platinum 8260y
Intel Xeon Platinum 8268
Intel Xeon Platinum 8270
Intel Xeon Platinum 8274
Intel Xeon Platinum 8276
Intel Xeon Platinum 8276l
Intel Xeon Platinum 8280
Intel Xeon Platinum 8280l
Intel Xeon Platinum 8284
Intel Xeon Platinum 8321hc
Intel Xeon Platinum 8351n
Intel Xeon Platinum 8352m
Intel Xeon Platinum 8352s
Intel Xeon Platinum 8352v
Intel Xeon Platinum 8352y
Intel Xeon Platinum 8353h
Intel Xeon Platinum 8354h
Intel Xeon Platinum 8356h
Intel Xeon Platinum 8358
Intel Xeon Platinum 8358p
Intel Xeon Platinum 8360
Intel Xeon Platinum 8360hl
Intel Xeon Platinum 8360y
Intel Xeon Platinum 8362
Intel Xeon Platinum 8368
Intel Xeon Platinum 8368q
Intel Xeon Platinum 8376h
Intel Xeon Platinum 8376hl
Intel Xeon Platinum 8380
Intel Xeon Platinum 8380h
Intel Xeon Platinum 8380hl
Intel Xeon Platinum 9221
Intel Xeon Platinum 9222
Intel Xeon Platinum 9242
Intel Xeon Platinum 9282
Intel Xeon Silver 4106h
Intel Xeon Silver 4108
Intel Xeon Silver 4109t
Intel Xeon Silver 4110
Intel Xeon Silver 4112
Intel Xeon Silver 4114
Intel Xeon Silver 4114t
Intel Xeon Silver 4116
Intel Xeon Silver 4116t
Intel Xeon Silver 4123
Intel Xeon Silver 4208
Intel Xeon Silver 4209t
Intel Xeon Silver 4210
Intel Xeon Silver 4210r
Intel Xeon Silver 4210t
Intel Xeon Silver 4214
Intel Xeon Silver 4214r
Intel Xeon Silver 4214y
Intel Xeon Silver 4215
Intel Xeon Silver 4215r
Intel Xeon Silver 4216
Intel Xeon Silver 4309y
Intel Xeon Silver 4310
Intel Xeon Silver 4310t
Intel Xeon Silver 4314
Intel Xeon Silver 4316
Intel Xeon W-3175x
Intel Xeon W-3223
Intel Xeon W-3225
Intel Xeon W-3235
Intel Xeon W-3245
Intel Xeon W-3245m
Intel Xeon W-3265
Intel Xeon W-3265m
Intel Xeon W-3275
Intel Xeon W-3275m
Event History
Jun 9, 2021
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-0131?
CVE-2021-0131 is classified as a high severity vulnerability due to the potential for information disclosure via network access.
2
How do I fix CVE-2021-0131?
To remediate CVE-2021-0131, update the Intel Security Library to version 3.3 or higher.
3
What are the implications of CVE-2021-0131?
CVE-2021-0131 may allow an authenticated user to disclose sensitive information through exploitation of a weak pseudo-random number generator.
4
Which versions of Intel Security Library are affected by CVE-2021-0131?
CVE-2021-0131 affects all versions of Intel Security Library prior to version 3.3.
5
Who is affected by CVE-2021-0131?
Authenticated users of systems utilizing affected versions of Intel's Security Library may be at risk from CVE-2021-0131.