Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

CVEs (44)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-1426 1Ibm 1Db2 Nov 21, 2024 Mar 22, 2018 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk...Show more IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071.Show less
CVE-2017-11519 1Tp Link 1Archer C9 (2.0) Firmware May 13, 2026 Jul 21, 2017 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.
CVE-2017-5214 1Codextrous 1B2j Contact May 13, 2026 May 17, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
CVE-2016-10180 1Dlink 1Dwr 932b Firmware May 13, 2026 Jan 30, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.