Lucene search
+L

344 matches found

BDU FSTEC
BDU FSTEC
added 2026/02/06 12:00 a.m.6 views

The vulnerability of the init_amd_zen4() function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, allows a hacker to trigger a system failure.

The vulnerability of the initamdzen4 function in the arch/x86/kernel/cpu/amd.c module, which supports Linux’s x86 kernel, is related to errors in the code for generating pseudo-random numbers. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS5.8AI score0.00136EPSS
SaveExploits0References11Affected Software4
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:00 a.m.10 views

EulerOS 2.0 SP13 : bind (EulerOS-SA-2026-1217)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker to predict the...

8.6CVSS5.6AI score0.00665EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:00 a.m.9 views

EulerOS 2.0 SP13 : bind (EulerOS-SA-2026-1205)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker to predict the...

8.6CVSS5.6AI score0.00665EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.8 views

MiracleLinux 9 : bind-9.16.23-34.el9_7.1 (AXSA:2025-11501:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11501:12 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 Tenable has extracted the...

8.6CVSS7.5AI score0.00665EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.5 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002399 advisory. Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat...

5.8CVSS7.1AI score0.03181EPSS
SaveExploits0References21
AstraLinux
AstraLinux
added 2026/01/13 2:01 p.m.7 views

Astra Linux – Vulnerability in bind9

Under certain circumstances, due to a flaw in the Pseudo Random Number Generator PRNG used, an attacker may be able to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through...

8.6CVSS6.6AI score0.00464EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/22 2:21 p.m.8 views

EUVD-2025-204711

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

7.2CVSS6.3AI score0.00182EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/22 2:21 p.m.44 views

CVE-2025-26379 Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

7.2CVSS0.00182EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/22 12:00 a.m.13 views

PT-2025-52650

Name of the Vulnerable Software and Affected Versions Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG affected versions not specified Description The software utilizes a weak pseudo-random number generator. This could allow an attacker to read or inject encrypted PowerG packets...

7.2CVSS6.3AI score0.00182EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/11/26 7:25 a.m.8 views

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

8.6CVSS6.1AI score0.00464EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2025/11/20 9:12 p.m.11 views

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

8.6CVSS6.1AI score0.00464EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2025/11/20 8:05 a.m.17 views

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

8.6CVSS6.1AI score0.00464EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/11/19 4:16 a.m.7 views

CVE-2025-52578

Incorrect Usage of Seeds in Pseudo-Random Number Generator CWE- 335 vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in...

5.7CVSS6.6AI score0.00146EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/18 6:30 a.m.7 views

EUVD-2025-197913

Incorrect Usage of Seeds in Pseudo-Random Number Generator CWE- 335 vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in...

5.7CVSS6.1AI score0.00146EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/18 3:26 a.m.20 views

CVE-2025-52578

Incorrect Usage of Seeds in Pseudo-Random Number Generator CWE- 335 vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in...

5.7CVSS0.00146EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/18 12:00 a.m.15 views

PT-2025-47241

Incorrect Usage of Seeds in Pseudo-Random Number Generator CWE- 335 vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in...

5.7CVSS6.7AI score0.00146EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2025/11/14 3:56 p.m.5 views

Security update for bind

This update for bind fixes the following issues: CVE-2025-40778: Address various spoofing attacks bsc1252379. CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

9.2CVSS6.9AI score0.00665EPSS
SaveExploits1References8
Redos
Redos
added 2025/11/13 12:00 a.m.10 views

ROS-20251113-06

The BIND DNS server vulnerability is related to a pseudo-random number generator PRNG vulnerability. Exploitation exploitation of the vulnerability could allow a remote attacker to compromise the integrity of data in the DNS system A vulnerability in the BIND DNS server is related to the loading ...

8.6CVSS5.5AI score0.11203EPSS
SaveExploits1
OSV
OSV
added 2025/11/12 3:42 p.m.9 views

USN-7836-2 bind9 vulnerabilities

USN-7836-1 fixed vulnerabilities in Bind. This update provides the corresponding fixes for Ubuntu 20.04 LTS. Original advisory details: Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to...

8.6CVSS6.8AI score0.11203EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2025/11/12 10:49 a.m.17 views

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

8.6CVSS6.1AI score0.00464EPSS
SaveExploits0References4
Rows per page
Query Builder