Vulnerability in Pwgen Project

CVE-2013-4442

Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.022 (80.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References