Falhas do tipo CWE-331

101 resultados

Entropia insuficiente em geração de números aleatórios

A fraqueza ocorre quando o software usa um gerador de números aleatórios ou pseudoaleatórios com entropia insuficiente para fins críticos de segurança, como gerar tokens, chaves criptográficas ou identificadores únicos. Um atacante consegue prever ou reproduzir esses valores, comprometendo toda a segurança que depende dessa aleatoriedade.

Exemplo

Uma aplicação usa Math.random() em JavaScript para gerar um token de sessão, ou confia em valores de /dev/urandom em uma máquina virtual com pouca entrada de entropia no boot. Em ambos os casos, um atacante consegue enumerar tokens válidos ou quebrar a criptografia que depende desses números.

Como mitigar

Use sempre geradores criptograficamente seguros apropriados para seu contexto: java.security.SecureRandom em Java, secrets.token_hex() em Python, crypto.getRandomBytes() em Node.js, ou /dev/urandom em sistemas Unix. Garanta que o sistema operacional coleta entropia suficiente (verifique /proc/sys/kernel/random/entropy_avail em Linux).

CVE-2024-38270MEDIUMAn insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens genEPSS 0.2%CVE-2026-2878MEDIUMInsufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.2%CVE-2025-2814MEDIUMCrypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functionsEPSS 0.2%CVE-2025-1860HIGHData::Entropy for Perl uses insecure rand() function for cryptographic functionsEPSS 0.2%CVE-2025-62774LOWOn Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.EPSS 0.2%CVE-2025-59015MEDIUMInsufficient Entropy in Password GenerationEPSS 0.2%CVE-2024-9055MEDIUMDPA Countermeasures need reseedingEPSS 0.2%CVE-2025-13399HIGHInsecure Encryption in Communication with the Web Interface on TP-Link VX800vEPSS 0.2%CVE-2026-13199MEDIUMInsufficient Entropy in Raspberry Pi 5 and Compute Module 5EPSS 0.2%CVE-2025-7432LOWDPA countermeasures not reseeded under certain conditionsEPSS 0.2%CVE-2026-1814MEDIUMRapid7 Nexpose Insecure Java Keystore Password GenerationEPSS 0.2%CVE-2025-32898MEDIUMThe KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KEPSS 0.2%CVE-2025-14972MEDIUMInsufficient DPA countermeasure reseedingEPSS 0.1%CVE-2026-4930HIGHDPA Countermeasures weakening on Series 3 devicesEPSS 0.1%CVE-2023-49927MEDIUMAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2EPSS 0.1%CVE-2026-4937MEDIUMPower System Insufficient EntropyEPSS 0.1%CVE-2025-27551MEDIUMDBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pmEPSS 0.1%CVE-2026-80171MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient EntrEPSS 0.1%CVE-2025-27552MEDIUMDBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pmEPSS 0.1%CVE-2026-4932MEDIUMThis Power System update is being released to address Insufficient EntropyEPSS 0.1%