Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

CVEs (224)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-3278 1Qnap 2Ts 239 Pro Firmware Ts 639 Pro Firmware Apr 23, 2026 Sep 21, 2009 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a...Show more The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack.Show less
CVE-2009-3238 4Canonical LinuxOpensuse+1 more 5Linux Enterprise Desktop Linux Enterprise ServerLinux Kernel+2 more Apr 23, 2026 Sep 18, 2009 N/A· v4 5.5 MEDIUM· v3 7.8 HIGH· v2 The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms...Show more The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time."Show less
CVE-2009-2367 1Iomega 1Storcenter Pro Firmware Apr 23, 2026 Jul 8, 2009 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session_id parameter.
CVE-2008-0166 3Canonical DebianOpenssl 3Debian Linux OpensslUbuntu Linux Apr 23, 2026 May 13, 2008 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guess...Show more OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.Show less

Previous 1...8 9 10 1112