UBUNTU-CVE-2016-1902

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2016-1902

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1902.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2016-1902

Upstream

CVE-2016-1902

Withdrawn

2025-07-18T16:43:24Z

Published

2016-06-01T22:59:00Z

Modified

2025-07-16T07:34:06Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when used with PHP 5.x without the paragonie/random_compat library and the openssl_random_pseudo_bytes function fails, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors.

References

Affected packages

Ubuntu:16.04:LTS / symfony

Package

Name: symfony
Purl: pkg:deb/ubuntu/symfony@2.7.9+dfsg-1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.7.9+dfsg-1

Affected versions

2.*

2.7.1+dfsg-1

2.7.5+dfsg-1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "php-symfony-asset",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-browser-kit",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-class-loader",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-config",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-console",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-css-selector",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-debug",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-debug-bundle",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-dependency-injection",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-doctrine-bridge",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-dom-crawler",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-event-dispatcher",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-expression-language",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-filesystem",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-finder",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-form",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-framework-bundle",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-http-foundation",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-http-kernel",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-intl",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-locale",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-monolog-bridge",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-options-resolver",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-phpunit-bridge",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-process",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-property-access",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-proxy-manager-bridge",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-routing",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-security",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-security-bundle",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-serializer",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-stopwatch",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-swiftmailer-bridge",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-templating",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-translation",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-twig-bridge",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-twig-bundle",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-validator",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-var-dumper",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-web-profiler-bundle",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php-symfony-yaml",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php5-symfony-debug",
            "binary_version": "2.7.9+dfsg-1"
        },
        {
            "binary_name": "php5-symfony-debug-dbgsym",
            "binary_version": "2.7.9+dfsg-1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1902.json"