Lucene search

RedhatCVELIST:CVE-2022-1615

HistorySep 01, 2022 - 12:00 a.m.

CVE-2022-1615

2022-09-0100:00:00

CWE-330

redhat

www.cve.org

samba

gnutls

gnutls_rnd()

predictable

random

vulnerability

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Samba",
    "versions": [
      {
        "version": "Samba 4.1 and newer",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.samba.org/show_bug.cgi?id=15103

gitlab.com/samba-team/samba/-/merge_requests/2644

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/

security.gentoo.org/glsa/202309-06