Published: 23/03/2019 Updated: 10/04/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

hostapd prior to 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.

Vulnerable Product	Search on Vulmon	Subscribe to Product
w1.fi hostapd

Several security issues were fixed in wpa_supplicant and hostapd ...

Full Disclosure mailing list archives   By Date By Thread </form>    Hostapd fails at seeding PRNGS, leading to insufficient entropy (CVE-2016-10743 and CVE-2019-10064) <!--X-Subject-Head ...

oss-sec mailing list archives   By Date By Thread </form>    Re: Hostapd fails at seeding PRNGS, leading to insufficient entropy (CVE-2016-10743 and CVE-2019-10064) <!--X-Subject-Header-E ...

oss-sec mailing list archives   By Date By Thread </form>    Hostapd fails at seeding PRNGS, leading to insufficient entropy (CVE-2016-10743 and CVE-2019-10064) <!--X-Subject-Header-End-- ...

CWE-332 https://w1.fi/cgit/hostap/commit/?id=98a516eae8260e6fd5c48ddecf8d006285da7389 https://lists.debian.org/debian-lts-announce/2019/03/msg00035.html https://usn.ubuntu.com/3944-1/http://www.openwall.com/lists/oss-security/2020/02/27/1 http://www.openwall.com/lists/oss-security/2020/02/27/2 http://seclists.org/fulldisclosure/2020/Feb/26 http://packetstormsecurity.com/files/156573/Hostapd-Insufficient-Entropy.html https://usn.ubuntu.com/3944-1/https://nvd.nist.gov

CVE-2016-10743

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect