Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2019-10064

hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.

  • Published: Feb 28, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-10064
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
w1.fi / hostapd - 2.6
debian / debian_linux 8.0 8.0.x
debian / debian_linux 9.0 9.0.x