Weaknesses of type CWE-335

21 results

Uso incorreto de sementes em gerador de números pseudoaleatórios

A fraqueza ocorre quando a semente (seed) de um PRNG é escolhida de forma previsível ou reutilizada, comprometendo a aleatoriedade dos números gerados. Um atacante que consegue prever ou reproduzir a semente consegue também prever toda a sequência de números 'aleatórios', invalidando a segurança de criptografia, tokens, IDs de sessão e outros mecanismos que dependem dessa aleatoriedade.

Example

Um aplicativo usa a hora do sistema (que é pública) como semente para gerar um token de sessão, ou reutiliza a mesma semente em múltiplas execuções. Um atacante que sabe quando a sessão foi criada consegue gerar o mesmo token sem autenticação legítima.

How to mitigate

Use uma fonte de aleatoriedade criptograficamente segura (como /dev/urandom no Linux ou SecureRandom em Java) para gerar sementes, nunca reutilize a mesma semente, e evite usar dados previsíveis (hora, IDs sequenciais) como sementes. Prefira APIs de alto nível que abstraem a gestão de sementes.

CVE-2018-14647MEDIUMPython's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial oEPSS 11.3%CVE-2016-10180HIGHAn issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.EPSS 4.4%CVE-2021-41117HIGHInsecure random number generationEPSS 3.1%CVE-2020-7010—Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able toEPSS 1.4%CVE-2016-3735—Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmt_rand in order to generate EPSS 1.4%CVE-2024-27632HIGHAn issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.EPSS 1.3%CVE-2024-36048CRITICALQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.EPSS 1.0%CVE-2022-39218HIGHRandom number seed fixed during compilationEPSS 0.8%CVE-2025-24783HIGHApache Cocoon: continuations may not be privateEPSS 0.8%CVE-2025-27580HIGHNIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, tiEPSS 0.7%CVE-2022-42159MEDIUMD-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.EPSS 0.7%CVE-2023-4472CRITICALCryptographically weak PRNG in Opinio 7.22EPSS 0.6%CVE-2024-1579HIGHInsufficient seeding of random number generatorEPSS 0.5%CVE-2026-41564HIGHCryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forkingEPSS 0.4%CVE-2021-34600MEDIUMTelenot complex: Insecure AES Key GenerationEPSS 0.4%CVE-2026-11625HIGHBytes::Random::Secure versions through 0.29 for Perl share internal state across forked processesEPSS 0.3%CVE-2026-11702HIGHBytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processesEPSS 0.3%CVE-2024-55566MEDIUMColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact caEPSS 0.2%CVE-2026-25835HIGHMbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).EPSS 0.2%CVE-2026-3503MEDIUMFault injection attack with ML-DSA and ML-KEM on ARMEPSS 0.2%