CWE-331: Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
A kind of CWE-330 Use of Insufficiently Random Values.
From the CWE List. © The MITRE Corporation.
Newest
- x.org libxdmcp, redhat enterprise linux, enterprise linux desktop +4 more +6 moreIt was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys...6.5 Medium
- freedesktop libice, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local...5.2 Medium
- schneider electric modicon m221, modicon m241, modicon m251 +3 more +5 moreSchneider Electric Modicon PLCs Predictable Value Range from Previous Values6.5 Medium
- ellislab expressionengineExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with...7.5 High
- invisioncommunity invision power boardInvision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying...5.9 Medium
- zend framework, fedoraproject fedora +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- zend framework, fedoraproject fedora +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local...6.5 Medium
- zend framework, debian linux +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.8 Medium
- zend framework, fedoraproject fedora, redhat enterprise linux +2 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc5.0 Medium
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...7.5 High
- zend framework, zendopenid +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc7.5 High
- zend framework, zendopenid +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.4 Medium
- zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc5.0 Medium
- zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.8 Medium
- zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.4 Medium
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc5.0 Medium
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.4 Medium
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc5.0 Medium
- post oak traffic systems awam bluetooth reader traffic system, postoaktraffic awam bluetooth reader +1 morePost Oak Bluetooth Traffic Systems Insufficient Entropy7.6
- zend framework, debian linux, fedoraproject fedora +2 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.1 Critical
- isc bindThe DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2)...6.8 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreThe GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit...9.8 Critical
- valicert enterprise validation authorityValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses...7.5 High