Falhas do tipo CWE-335

21 resultados

Uso incorreto de sementes em gerador de números pseudoaleatórios

Ocorre quando a aplicação inicializa um PRNG com uma semente previsível, fraca ou reutilizada, comprometendo a aleatoriedade dos números gerados. Isso expõe operações criptográficas, tokens de sessão e sorteios a predição ou reprodução por atacantes.

Exemplo

Um sistema gera tokens de sessão usando srand(time(NULL)) como semente: como time() avança apenas a cada segundo, um atacante próximo consegue adivinhar ou reproduzir o token. Ou um PRNG inicializado sempre com a mesma semente fixa gera a mesma sequência de números em cada execução.

Como mitigar

Use /dev/urandom, arc4random() ou APIs criptográficas do SO (CryptGenRandom no Windows, getrandom() no Linux) para semear o PRNG. Nunca use time(), PID ou dados previsíveis como semente; sempre reutilize a semente de uma única operação de entropia do sistema operacional.

CVE-2018-14647MEDIUMPython's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial oEPSS 11.3%CVE-2016-10180HIGHAn issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.EPSS 4.4%CVE-2021-41117HIGHInsecure random number generationEPSS 3.1%CVE-2020-7010—Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able toEPSS 1.4%CVE-2016-3735—Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmt_rand in order to generate EPSS 1.4%CVE-2024-27632HIGHAn issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.EPSS 1.3%CVE-2024-36048CRITICALQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.EPSS 1.0%CVE-2022-39218HIGHRandom number seed fixed during compilationEPSS 0.8%CVE-2025-24783HIGHApache Cocoon: continuations may not be privateEPSS 0.8%CVE-2025-27580HIGHNIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, tiEPSS 0.7%CVE-2022-42159MEDIUMD-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.EPSS 0.7%CVE-2023-4472CRITICALCryptographically weak PRNG in Opinio 7.22EPSS 0.6%CVE-2024-1579HIGHInsufficient seeding of random number generatorEPSS 0.5%CVE-2026-41564HIGHCryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forkingEPSS 0.4%CVE-2021-34600MEDIUMTelenot complex: Insecure AES Key GenerationEPSS 0.4%CVE-2026-11625HIGHBytes::Random::Secure versions through 0.29 for Perl share internal state across forked processesEPSS 0.3%CVE-2026-11702HIGHBytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processesEPSS 0.3%CVE-2024-55566MEDIUMColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact caEPSS 0.2%CVE-2026-25835HIGHMbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).EPSS 0.2%CVE-2026-3503MEDIUMFault injection attack with ML-DSA and ML-KEM on ARMEPSS 0.2%