Vulnerabilities > CVE-2021-27211 - Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Steghide Project Steghide 0.5.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
steghide-project
CWE-335

Summary

steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data.

Vulnerable Configurations

Part Description Count
Application
Steghide_Project
1