CVE-2016-9594CWE-665

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value

Medium · published April 23, 2018

CVSS v3.0
6.5
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.02218 · 82.4th percentile
Weakness
CWE-665 · Improper Initialization
Published
2018-04-23T19:00Z
EPSS history
Timeline
  • 23 APR 19:00Z
    curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value
    cvelistv5