CVE-2016-10743
Fixed in a distro release EPSS 2%
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.
Products: w1.fi hostapd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wpa | 2:2.6-7 |
| Debian 13 | wpa | 2:2.6-7 |
| Debian 14 | wpa | 2:2.6-7 |
| Debian 8 | wpa | 2.3-1+deb8u7 |
| Ubuntu 14.04 LTS | wpa | 2.1-0ubuntu1.7 |
| Ubuntu 16.04 LTS | wpa | 2.4-0ubuntu6.4 |
| Ubuntu 18.04 LTS | wpa | 2:2.6-15ubuntu2.2 |