CVE-2024-55566
ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack graphing unavailable to other users.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.6
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
- EPSS probability
- 0.22%
- CWE
- CWE-335
- Published
- 2024-12-09
- Last modified
- 2026-03-13
Affected products
- n/a n/a
Weakness type
Related vulnerabilities
- CVE-2026-11702 — Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes
- CVE-2026-11625 — Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
- CVE-2026-41564 — CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking
- CVE-2026-3503 — Fault injection attack with ML-DSA and ML-KEM on ARM
- CVE-2025-52578 — Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec...
- CVE-2025-27580 — NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates...
- CVE-2025-24783 — Apache Cocoon: continuations may not be private
- CVE-2024-1579 — Insufficient seeding of random number generator