Falhas do tipo CWE-331

97 resultados

Entropia insuficiente em geração de números aleatórios

A fraqueza ocorre quando o software usa um gerador de números aleatórios ou pseudoaleatórios com entropia insuficiente para fins críticos de segurança, como gerar tokens, chaves criptográficas ou identificadores únicos. Um atacante consegue prever ou reproduzir esses valores, comprometendo toda a segurança que depende dessa aleatoriedade.

Exemplo

Uma aplicação usa Math.random() em JavaScript para gerar um token de sessão, ou confia em valores de /dev/urandom em uma máquina virtual com pouca entrada de entropia no boot. Em ambos os casos, um atacante consegue enumerar tokens válidos ou quebrar a criptografia que depende desses números.

Como mitigar

Use sempre geradores criptograficamente seguros apropriados para seu contexto: java.security.SecureRandom em Java, secrets.token_hex() em Python, crypto.getRandomBytes() em Node.js, ou /dev/urandom em sistemas Unix. Garanta que o sistema operacional coleta entropia suficiente (verifique /proc/sys/kernel/random/entropy_avail em Linux).

CVE-2017-2626MEDIUMIt was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for sessEPSS 0.4%CVE-2026-90562CRITICALLangBot before 4.10.11 Authentication Bypass via Weak Recovery KeyEPSS 0.4%CVE-2026-46473HIGHAuthen::TOTP versions before 0.1.1 for Perl generate secrets using randEPSS 0.4%CVE-2021-3505—A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug inEPSS 0.4%CVE-2025-1828HIGHPerl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functionsEPSS 0.4%CVE-2026-41080LOWlibexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.EPSS 0.4%CVE-2024-22473MEDIUMUninitialized TRNG used for ECDSA after EM2/EM3 sleep for VSE devicesEPSS 0.4%CVE-2022-34746MEDIUMAn insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was founEPSS 0.4%CVE-2025-54885MEDIUMThinbus generates insufficient entropy: 252 bits vs minimum 256 bitsEPSS 0.4%CVE-2025-29311HIGHLimited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are aEPSS 0.4%CVE-2025-15387HIGHQNO Technology｜VPN Firewall - Insufficient EntropyEPSS 0.4%CVE-2026-8700HIGHCrypt::DSA versions before 1.20 for Perl generate seeds using randEPSS 0.4%CVE-2024-56370MEDIUMNet::Xero 0.044 and earlier for Perl uses insecure rand() function for cryptographic functionsEPSS 0.3%CVE-2026-71851CRITICALcrypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency ChainEPSS 0.3%CVE-2026-19906MEDIUMpkp pkp-lib API Key Generation APIProfileForm.php setData entropyEPSS 0.3%CVE-2026-46474HIGHTrog::TOTP versions before 1.006 for Perl generate secrets using randEPSS 0.3%CVE-2026-62646CRITICALA vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufEPSS 0.3%CVE-2026-27490HIGHCombodo iTop: Weak secret generation for inline imageEPSS 0.3%CVE-2026-4827HIGHInsufficient Entropy vulnerability on Multiple ProductsEPSS 0.3%CVE-2026-19748MEDIUMTenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropyEPSS 0.3%