cve.bz

CWE-332: Insufficient Entropy in PRNG

Filter

The lack of entropy available for, or used by, a Pseudo-Random Number Generator (PRNG) can be a stability and security threat.

What the weakness is: CWE-332 at MITRE. OWASP Top 10: A04:2025 Cryptographic Failures

Ask an AI about CWE-332

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-332: Insufficient Entropy in PRNG and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/332.html and https://cve.bz/cve/cwe/332?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.4CVE-2026-3290EPSS 0.2%

    Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values

  2. 7.5CVE-2023-20107EPSS 0.7%

    A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco ASA 5506-…

  3. 7.2CVE-2017-18486EPSS 4.8%

    Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG t…

  4. 7.5CVE-2019-1715EPSS 1.7%

    A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…

  5. 7.5CVE-2016-10743EPSS 2.4%

    hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.

  6. 9.8CVE-2018-9057EPSS 1.9%

    aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by levera…

  7. 2.6CVE-2017-9371EPSS 0.8%

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, maki…

  8. 7.5CVE-2014-9690EPSS 0.8%

    Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the random number generator (RNG) used in the supplier's solution …

  9. 7.5CVE-2016-9154EPSS 1.5%

    Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 for Des…

  10. –CVE-2014-0016EPSS 2.2%

    stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remo…