CWE-332: Insufficient Entropy in PRNG
The lack of entropy available for, or used by, a Pseudo-Random Number Generator (PRNG) can be a stability and security threat.
A kind of CWE-331 Insufficient Entropy.
From the CWE List. © The MITRE Corporation.
Newest
- silicon labs rs9116 sdk Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values 7.4 High
- cisco adaptive security appliance, adaptive security appliance (asa) software, secure firewall threat defense +2 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability 5.3 Medium
- github.com/dinever/golf, golf project golf +1 more Cryptographically weak random number generation in github.com/dinever/golf 8.8 High
- jitbit helpdesk Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of... 7.2 High
- cisco adaptive security appliance (asa) software, firepower threat defense (ftd) software, adaptive security appliance device manager +1 more +3 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability 5.3 Medium
- w1.fi hostapd hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random()... 7.5 High
- hashicorp terraform HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG 9.8 Critical
- blackberry qnx software development platform, qnx software development platform (qnx sdp) +1 more In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of... 2.6 Low
- huawei ws318 firmware Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the... 7.5 High
- siemens desigo web module pxa30-w0 firmware, desigo web module pxa30-w1 firmware, desigo web module pxa30-w2 firmware +3 more +5 more Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers... 7.5 High
- sensiolabs symfony, debian linux +1 more Symfony Cryptographic Vulnerability 7.5 High
- stunnel stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL... 4.3 Medium
- dlitz pycrypto PyCrypto does not properly reseed PRNG before allowing access 4.3 Medium