CVE-2016-10743

Description

hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.43

Associated Vulnerability

VulnerabilityOS Platform
client support for WPA and WPA2 (USN-3745-1) hostapd_2.1-0ubuntu1.7_i386.debLinux
client support for WPA and WPA2 (USN-3745-1) hostapd_2.1-0ubuntu1.7_amd64.debLinux
client support for WPA and WPA2 (USN-3745-1) hostapd_2.4-0ubuntu6.4_i386.debLinux
client support for WPA and WPA2 (USN-3745-1) hostapd_2.4-0ubuntu6.4_amd64.debLinux
client support for WPA and WPA2 (USN-3745-1) hostapd_2.6-15ubuntu2.2_i386.debLinux
client support for WPA and WPA2 (USN-3745-1) hostapd_2.6-15ubuntu2.2_amd64.debLinux
client support for WPA and WPA2 (USN-3745-1) wpasupplicant_2.1-0ubuntu1.7_i386.debLinux
client support for WPA and WPA2 (USN-3745-1) wpasupplicant_2.1-0ubuntu1.7_amd64.debLinux
client support for WPA and WPA2 (USN-3745-1) wpasupplicant_2.4-0ubuntu6.4_i386.debLinux
client support for WPA and WPA2 (USN-3745-1) wpasupplicant_2.4-0ubuntu6.4_amd64.debLinux
client support for WPA and WPA2 (USN-3745-1) wpasupplicant_2.6-15ubuntu2.2_i386.debLinux
client support for WPA and WPA2 (USN-3745-1) wpasupplicant_2.6-15ubuntu2.2_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.1-0ubuntu1.7_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.1-0ubuntu1.7_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.4-0ubuntu6.4_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.4-0ubuntu6.4_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.6-15ubuntu2.2_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.6-15ubuntu2.2_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.6-18ubuntu1.1_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) hostapd_2.6-18ubuntu1.1_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.1-0ubuntu1.7_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.1-0ubuntu1.7_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.4-0ubuntu6.4_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.4-0ubuntu6.4_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.6-15ubuntu2.2_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.6-15ubuntu2.2_amd64.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.6-18ubuntu1.1_i386.debLinux
client support for WPA and WPA2 (USN-3944-1) wpasupplicant_2.6-18ubuntu1.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234