CVE-2026-118765
Description
A flaw was found in Botan. When its automatic random number generator (RNG) is queried with an empty buffer while unseeded, it can improperly mark itself as seeded without gathering entropy from a secure source. On configurations lacking system RNG support, the generator falls back on predictable values such as timestamps and process IDs. A local attacker can exploit this condition to predict random outputs, compromising the confidentiality and integrity of cryptographic keys and sensitive operations.
Statement
This vulnerability is rated as Moderate impact because exploitation requires an atypical sequence of application calls alongside local access to observe or predict cryptographic states. In standard Red Hat Enterprise Linux environments, platform entropy facilities are active, preventing reliance on predictable fallback timers and process identifiers. Furthermore, Botan is not included as part of core Red Hat Enterprise Linux releases, significantly limiting exposure across enterprise deployments.
Understanding the Weakness (CWE)
Access Control,Other
Technical Impact: Bypass Protection Mechanism; Other
If a PRNG is used incorrectly, such as using the same seed for each initialization or using a predictable seed, then an attacker may be able to easily guess the seed and thus the random numbers. This could lead to unauthorized access to a system if the seed is used for authentication and authorization.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
