626 matches found
Siemens Desigo PX Web Module Insufficient Entropy Vulnerability
OVERVIEW Siemens has released a firmware update to mitigate an insufficient entropy vulnerability that affects Siemens Desigo PX Web modules. Marcella Hastings, Joshua Fried, and Nadia Heninger from the University of Pennsylvania coordinated this vulnerability directly with Siemens. This...
CVE-2016-6670: Exposure of Sensitive Information to an Unauthorized Actor
Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate...
PT-2016-7031
Name of the Vulnerable Software and Affected Versions Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 Description The issue concerns the generation of self-signed certificates in certain Huawei devices. These devices use random numbers with insufficient...
CVE-2016-5300
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876...
CVE-2016-5300
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876...
Juniper Networks Junos OS QFX Series: Insufficient Entropy Vulnerability
Junos OS on QFX series is prone to an insufficient entropy vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MGASA-2016-0156 Updated php-ZendFramework packages fix security vulnerability
The php-ZendFramework package has been updated to version 1.12.18 to fix a potential information disclosure and insufficient entropy vulnerability in the word CAPTCHA ZF2015-09 and several other functions ZF2016-01...
PT-2016-7959
Name of the Vulnerable Software and Affected Versions php-ZendFramework versions prior to 1.12.18 Description The issue concerns a potential information disclosure and insufficient entropy vulnerability in the word CAPTCHA and several other functions. Recommendations For versions prior to 1.12.18...
CVE-2016-1273: Undefined Security Weakness
Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors...
PT-2016-1746
Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 13.2X51-D40 Juniper Junos OS versions prior to 14.1X53-D30 Juniper Junos OS versions prior to 15.1X53-D20 Description The issue is related to insufficient entropy in the Juniper Junos OS, which makes it easie...
Potential Insufficient Entropy Vulnerability in ZF1
More info at https://framework.zend.com/security/advisory/ZF2016-01...
Zend Framework CAPTCHA Challenge Insufficient Entropy Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services. An insufficient entropy vulnerability exists in ZF. An attacker can exploit this vulnerability to obtain sensitive...
Design/Logic Flaw
The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224...
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
More info at https://framework.zend.com/security/advisory/ZF2015-09...
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
More info at https://framework.zend.com/security/advisory/ZF2015-09...
Potential Information Disclosure and Insufficient Entropy vulnerability in Zend\Captcha\Word
More info at https://framework.zend.com/security/advisory/ZF2015-09...
AIX 6.1 TL 6 : ntp4 (IV71094)
https://vulners.com/cve/CVE-2014-9297 Network Time Protocol NTP Project NTP daemon ntpd could allow a remote attacker to conduct spoofing attacks, caused by insufficient entropy in PRNG. An attacker could exploit this vulnerability to spoof the IPv6 address ::1 to bypass ACLs and launch further...
AIX 7.1 TL 0 : ntp4 (IV71096)
https://vulners.com/cve/CVE-2014-9297 Network Time Protocol NTP Project NTP daemon ntpd could allow a remote attacker to conduct spoofing attacks, caused by insufficient entropy in PRNG. An attacker could exploit this vulnerability to spoof the IPv6 address ::1 to bypass ACLs and launch further...
stunnel < 5.12 OpenSSL Multiple Vulnerabilities
The version of stunnel installed on the remote host is prior to version 5.12. It is, therefore, affected by the following vulnerabilities in the bundled OpenSSL library : - A flaw exists in the DTLSv1listen function due to state information being preserved in the SSL object from one invocation to...
Vulnerability in OpenSSL - Handshake with unseeded PRNG
Under certain conditions an OpenSSL 1.0.2 client can complete a handshake with an unseeded PRNG. If the handshake succeeds then the client random that has been used will have been generated from a PRNG with insufficient entropy and therefore the output may be predictable...