CVE catalog

CVE-2016-10743

wpa: CVE-2016-10743

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
2.35% · Oct 25, 2026

hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwpasid2:2.11-4fixed
Debianwpaforky2:2.11-4fixed
Debianwpatrixie2:2.10-24fixed
Debianwpabookworm2:2.10-12+deb12u3fixed
Debianwpabookworm-security2:2.10-12+deb12u2fixed
Ubuntuwpa14.041.0-3ubuntu2vulnerable
Ubuntuwpa14.041.0-3ubuntu3vulnerable
Ubuntuwpa14.041.0-3ubuntu4vulnerable
Ubuntuwpa14.042.1-0ubuntu1vulnerable
Ubuntuwpa14.042.1-0ubuntu1.1vulnerable
Ubuntuwpa14.042.1-0ubuntu1.2vulnerable
Ubuntuwpa14.042.1-0ubuntu1.3vulnerable
Ubuntuwpa14.042.1-0ubuntu1.4vulnerable
Ubuntuwpa14.042.1-0ubuntu1.5vulnerable
Ubuntuwpa14.042.1-0ubuntu1.6vulnerable
Ubuntuwpa14.042.1-0ubuntu1.7fixed
Ubuntuwpa16.042.4-0ubuntu3vulnerable
Ubuntuwpa16.042.4-0ubuntu4vulnerable
Ubuntuwpa16.042.4-0ubuntu5vulnerable
Ubuntuwpa16.042.4-0ubuntu6vulnerable
Ubuntuwpa16.042.4-0ubuntu6.2vulnerable
Ubuntuwpa16.042.4-0ubuntu6.3vulnerable
Ubuntuwpa16.042.4-0ubuntu6.4fixed
Ubuntuwpa18.042.4-0ubuntu10vulnerable
Ubuntuwpa18.042:2.4-1.1ubuntu1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.2fixed
Ubuntuwpa14.041.0-3ubuntu2vulnerable
Ubuntuwpa14.041.0-3ubuntu3vulnerable
Ubuntuwpa14.041.0-3ubuntu4vulnerable
Ubuntuwpa14.042.1-0ubuntu1vulnerable
Ubuntuwpa14.042.1-0ubuntu1.1vulnerable
Ubuntuwpa14.042.1-0ubuntu1.2vulnerable
Ubuntuwpa14.042.1-0ubuntu1.3vulnerable
Ubuntuwpa14.042.1-0ubuntu1.4vulnerable
Ubuntuwpa14.042.1-0ubuntu1.5vulnerable
Ubuntuwpa14.042.1-0ubuntu1.6vulnerable
Ubuntuwpa14.042.1-0ubuntu1.7fixed
Ubuntuwpa16.042.4-0ubuntu3vulnerable
Ubuntuwpa16.042.4-0ubuntu4vulnerable
Ubuntuwpa16.042.4-0ubuntu5vulnerable
Ubuntuwpa16.042.4-0ubuntu6vulnerable
Ubuntuwpa16.042.4-0ubuntu6.2vulnerable
Ubuntuwpa16.042.4-0ubuntu6.3vulnerable
Ubuntuwpa16.042.4-0ubuntu6.4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwpasourcesid2:2.6-7unimportantNot reportedNot reported
Debianwpasourceforky2:2.6-7unimportantNot reportedNot reported
Debianwpasourcetrixie2:2.6-7unimportantNot reportedNot reported
Debianwpasourcebookworm2:2.6-7unimportantNot reportedNot reported
Ubuntuwpadeb14.042.1-0ubuntu1.7Not reportedUSN-3944-1Not reported
Ubuntuwpadeb16.042.4-0ubuntu6.4Not reportedUSN-3944-1Not reported
Ubuntuwpadeb18.042:2.6-15ubuntu2.2Not reportedUSN-3944-1Not reported
Ubuntuwpadeb14.042.1-0ubuntu1.7Not reportedUBUNTU-CVE-2016-10743Not reported
Ubuntuwpadeb16.042.4-0ubuntu6.4Not reportedUBUNTU-CVE-2016-10743Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [eapoltest]Fixed

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [hostapd]Fixed

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [libwpa-client-dev]Fixed

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [wpagui]Fixed

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [wpasupplicant]Fixed

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

[Debian 13 (Trixie)]

  • [eapoltest]Fixed

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

  • [hostapd]Fixed

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

  • [libwpa-client-dev]Fixed

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

  • [wpagui]Fixed

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

  • [wpasupplicant]Fixed

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.6-7

      dsa · wpa · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]