CVE-2012-1577

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-335

Affected software

Vendor	Product	Versions
dietlibc	dietlibc	before 0.33

References

http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/random.c#rev1.16Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/03/23/14Mailing List, Third Party Advisory
https://github.com/ensc/dietlibc/blob/master/CHANGESThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-1577Third Party Advisory
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/random.c#rev1.16Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/03/23/14Mailing List, Third Party Advisory
https://github.com/ensc/dietlibc/blob/master/CHANGESThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-1577Third Party Advisory

Timeline

Published: Dec 10, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-15786.8Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers CVE-2012-15795.0The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript fil CVE-2012-15806.8Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote a CVE-2012-15815.0MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote CVE-2012-15824.3Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote att CVE-2012-15835.0Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunn CVE-2012-15844.3Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a deni CVE-2012-15854.0OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk cons CVE-2012-15862.1mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second CVE-2012-15883.5Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.module) in Drupal 7.x b CVE-2012-15895.8Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and c CVE-2012-15904.0The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authentic