CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which…

published February 28, 2020

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03842 · 90.1th percentile
Published
2020-02-28T14:07Z
EPSS history
Timeline
  • 28 FEB 14:07Z
    hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which…
    cvelistv5