CVEvulnerability
CVE-2019-10064
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-331
Description
hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.
Affected configurations
• w1.fi hostapd (< 2.6)
• debian debian linux 8.0
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-331 Insufficient Entropy weakness
References
- http://packetstormsecurity.com/files/156573/Hostapd-Insufficient-Entropy.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Feb/26 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/2 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00010.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/08/msg00013.html Mailing List, Third Party Advisory
- https://w1.fi/cgit/hostap/commit/?id=98a516eae8260e6fd5c48ddecf8d006285da7389 Patch, Third Party Advisory
- http://packetstormsecurity.com/files/156573/Hostapd-Insufficient-Entropy.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Feb/26 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/02/27/2 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/03/msg00010.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/08/msg00013.html Mailing List, Third Party Advisory
- https://w1.fi/cgit/hostap/commit/?id=98a516eae8260e6fd5c48ddecf8d006285da7389 Patch, Third Party Advisory