ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack graphing unavailable to other users.
References
Configurations
No configuration.
History
17 Dec 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CWE | CWE-335 |
09 Dec 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-12-09 02:15
Updated : 2024-12-17 21:15
NVD link : CVE-2024-55566
Mitre link : CVE-2024-55566
CVE.ORG link : CVE-2024-55566
JSON object : View
Products Affected
No product.
CWE
CWE-335
Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)