GHSA-rmw5-xpg9-jr29 BIT-rclone-2020-28924 CVE-2020-28924 GO-2022-0878
Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone
- Severity
- 7.5 / 10
- High · CVSS 3.1
- Exploit chance (EPSS)
- 1.38%
- Chance of exploitation in the next 30 days. Higher than 72.15% of scored vulnerabilities.
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- CWE-331 Insufficient Entropy
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
- Fix
1.53.3- Upgrade github.com/rclone/rclone to this version or later
Description
An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limits the entropy of the passwords enormously. These passwords are often used in the crypt backend for encryption of data. It would be possible to make a dictionary of all possible passwords with about 38 million entries per password length. This would make decryption of secret material possible with a plausible amount of effort. NOTE: all passwords generated by affected versions should be changed.
Affected versions
Go
| Package | Vulnerable | Fixed in |
|---|---|---|
| github.com/rclone/rclone | < 1.53.3 |
1.53.3 |
How to fix
Move to the fixed version or later with your package manager, update the lockfile, and run your tests. If the package only arrives through another dependency, upgrade that dependency first. If none of its releases pulls a fixed version yet, force the version with your package manager's override.
github.com/rclone/rclone Go → 1.53.3
- go
go get github.com/rclone/rclone@v1.53.3 && go mod tidy
Severity breakdown
CVSS 3.1 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Weakness
CWE-331: Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
How to prevent it
- Implementation: Determine the necessary entropy to adequately provide for randomness and predictability. This can be achieved by increasing the number of bits of objects such as keys and seeds.
CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
How to prevent it
- Implementation: Use functions or hardware which use a hardware-based random number generation for all crypto. This is the recommended solution. Use CyptGenRandom on Windows, or hw_rand() on Linux.
References
Advisories
Packages
Other links
Timeline
- Published
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-38xv-hf3p-h7mq rclone: source object names can escape the configured root on upload | Medium | Also affects github.com/rclone/rclone |
| GHSA-2p48-j3qc-rx9f rclone: S3 multipart declared-length memory exhaustion | High | Also affects github.com/rclone/rclone |
| GHSA-p569-5gjg-9cmj rclone: RC per-server auth-proxy bypass | Critical | Also affects github.com/rclone/rclone |
| GHSA-xwwr-4h3p-r22c rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass | Critical | Also affects github.com/rclone/rclone |
| GHSA-c476-6w5q-jw77 rclone: FTP cross-session auth-proxy backend confusion | High | Also affects github.com/rclone/rclone |
| GHSA-f8g7-2xjc-7mfh rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination | High | Also affects github.com/rclone/rclone |
| GHSA-p6m2-r3w9-mpxw rclone local: crafted Range request against a translated symlink panics (DoS) | Medium | Also affects github.com/rclone/rclone |
| GHSA-66hp-wgxq-6f5q rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace | Medium | Also affects github.com/rclone/rclone |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor