Common Weakness Enumeration
CWE-332 Insufficient Entropy in PRNG
Description
The lack of entropy available for, or used by, a Pseudo-Random Number Generator (PRNG) can be a stability and security threat.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-332 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-x377-f64p-hf5j | CVE-2013-1445 | HIGH |
PyCrypto does not properly reseed PRNG before allowing access |
2024-10-21 | |
| GHSA-q9qr-jwpw-3qvv | CVE-2016-15005 | HIGH |
Golf may allow attacker to bypass CSRF protections due to weak PRNG |
2024-05-20 | |
| GHSA-r48h-jr2j-9g78 | CVE-2018-9057 | CRITICAL |
HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG |
2024-02-21 | |
| GHSA-jjx5-fq5g-8xpc | CVE-2016-1902 | HIGH | - |
Symfony Cryptographic Vulnerability |
2024-02-08 |