Skip to main content

Use of Insufficiently Random Values

CVE-2022-1615

Medium
5.5/10

Summary

In Samba versions prior to samba-4.17.0rc1, GnuTLS "gnutls_rnd()" can fail and give predictable random values.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • NONE

CWE-330 - Use of Insufficiently Random Values

The software uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References

Advisory Timeline

  • Published