Predictable Random Value Generation in Samba by GnuTLS

CVE-2022-1615

What is CVE-2022-1615?

A specific issue exists in Samba concerning the GnuTLS library's function gnutls_rnd(), which has been reported to occasionally return predictable random values. This behavior poses potential security risks, allowing for easier exploitation of security mechanisms dependent on randomness. The vulnerability potentially affects all versions of Samba that utilize this library, necessitating updates to mitigate any associated risks.

References