CVE-2019-10064

Fixed in a distro release EPSS 4%

hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.

Published 2020-02-28 · CVE record · OSV

Products: w1.fi hostapd, debian_linux

Distro releases