Apache CloudStack: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2022-26779 is a high-severity use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in Apache CloudStack from Apache, with a CVSS 3.1 base score of 7.5 out of 10. It can be exploited remotely over the network by an attacker with a low-privileged account, without any action from a user. The record lists version 4.16.1 as the first without the flaw, so updating Apache CloudStack to that release or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 2.85% chance of exploitation within 30 days, higher than 87% of scored CVEs.
High severity with no evidence of exploitation so far.
What to do
- Update Apache CloudStack to 4.16.1 or a later version.
- Update Cloudstack to 4.16.1.0 or a later version.
- Read the advisory on github.com for workarounds and exact fixed builds.
Affected products and versions
| Vendor | Product | Affected versions | Fixed in |
|---|---|---|---|
| Apache | Apache CloudStack | Apache CloudStack up to, but not including, 4.16.1 | 4.16.1 |
| Apache | Cloudstack | before 4.16.1.0 | 4.16.1.0 |
Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.
How the severity score breaks down
- Attack vector
- NetworkCan be exploited remotely over a network, including the internet.
- Attack complexity
- HighSuccess depends on conditions outside the attacker's control.
- Privileges required
- LowA basic user account is enough.
- User interaction
- NoneNo action by a victim is required.
- Scope
- UnchangedImpact stays within the vulnerable component.
- Confidentiality
- HighAll data handled by the component can be read.
- Integrity
- HighData or code can be modified at will.
- Availability
- HighThe component can be taken down completely.
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. Scored by NVD.
| Scoring system | Score | Severity | Scored by |
|---|---|---|---|
| CVSS 3.1 | 7.5 | High | NVD |
| CVSS 2.0 | 4.6 | Medium | NVD |
Official description
Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created based only on an email address, a random token is generated. An attacker with knowledge of the project ID and the fact that the invite is sent, could generate time deterministic tokens and brute force attempt to use them prior to the legitimate receiver accepting the invite. This feature is not enabled by default, the attacker is required to know or guess the project ID for the invite in addition to the invitation token, and the attacker would need to be an existing authorized user of CloudStack.
Source: the CVE record as published by its numbering authority, via NVD and CVE.org.
The underlying weakness: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
How developers prevent this class of flaw
- Use functions or hardware which use a hardware-based random number generation for all crypto. This is the recommended solution. Use CyptGenRandom on Windows, or hw_rand() on Linux.
More Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerabilities (CWE-338)
Timeline
- CVE record published.
- Record last changed materially (score, affected products, status or references).
References
Advisories
- github.com/JLLeitschuh/security-research/security/advisories/GHSA-vpcc-9rh2-8jfpExploit, Third Party Advisory
- lists.apache.org/thread/dmm07b1cyosovqr12ddhkko501p11h2hMailing List
Third-party and government advisories
- openwall.com/lists/oss-security/2022/03/15/1Mailing List, Third Party Advisory
Other vulnerabilities in Apache CloudStack
- 7.5 High severity
- 8.1 High severity
- 7.2 High severity
- 9.1 Critical severity
- 8.8 High severity
- 9.1 Critical severity
Spotted an error? Tell us.