CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615: Use of Insufficiently Random Values

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

PT-2022-20315

Name of the Vulnerable Software and Affected Versions Openmoney API versions through 2020-06-29 Description The issue concerns the use of the JavaScript Math.random function, which does not provide cryptographically secure random numbers. This could potentially lead to security risks, as non-secu...

PT-2021-21400

Name of the Vulnerable Software and Affected Versions yii2 affected versions not specified Description The issue concerns the use of a predictable algorithm in the random number generator. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2021-21407

Name of the Vulnerable Software and Affected Versions yii2 affected versions not specified Description The issue concerns the use of a predictable algorithm in the random number generator. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

Advisory ROSA-SA-2021-1829

Software: erlang R16B OS: Cobalt 7.9 CVE-ID: CVE-2011-0766 CVE-Crit: MEDIUM CVE-DESC: The random number generator in the Crypto application before 2.0.2.2.2 and SSH before 2.0.5, which was used in the Erlang / OTP ssh library before R14B03, uses predictable starting numbers based on the current...

Design/Logic Flaw

It was found that various OpenID Providers OPs had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator CVE-2008-0166. In combination with the DNS Cache Poisoning issue CVE-2008-1447 and the fact that almost all SSL/TLS implementations do not...

CVE-2008-3280

It was found that various OpenID Providers OPs had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator CVE-2008-0166. In combination with the DNS Cache Poisoning issue CVE-2008-1447 and the fact that almost all SSL/TLS implementations do not...

CVE-2008-3280: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

It was found that various OpenID Providers OPs had TLS Server Certificates that used weak keys, as a result of the Debian Predictable Random Number Generator CVE-2008-0166. In combination with the DNS Cache Poisoning issue CVE-2008-1447 and the fact that almost all SSL/TLS implementations do not...

Design/Logic Flaw

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output...

PT-2020-7386

Name of the Vulnerable Software and Affected Versions: kdeplasma-addons versions after 4.10.5 Description: The issue concerns the KRandom::random function in the KDE Paste Applet, which utilizes the GNU C Library rand function's linear congruential generator. This makes it easier for attackers to...

Debian DLA-1936-1 : cups security update

An issue has been found in cups, the Common UNIX Printing Systemtm. While generating a session cookie for the CUPS web interface, a predictable random number seed was used. This could lead to unauthorized scripted access to the enabled web interface. For Debian 8 'Jessie', this problem has been...

Code injection

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by...

Code injection

A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize function to prevent a malicious contract from being called, but the attacker can bypass it by writing t...

CVE-2018-17877

A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize function to prevent a malicious contract from being called, but the attacker can bypass it by writing t...

CVE-2018-17968

A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by...

PT-2018-14242

Name of the Vulnerable Software and Affected Versions Greedy 599 affected versions not specified Description The issue concerns a lottery smart contract implementation for Greedy 599, an Ethereum gambling game. It generates a random value that can be predicted through an external contract call. A...

PT-2018-14305

Name of the Vulnerable Software and Affected Versions RuletkaIo affected versions not specified Description The issue concerns a predictable random value generation in a smart contract implementation for an Ethereum gambling game. Specifically, the random function uses a block timestamp and block...

CVE-2018-12975

The random function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable which can be read with a getStorageAt call. Therefore, attackers can...