Skip to content
OpenAdvisories
Unscored USN-4842-1 1 CVE

ntopng vulnerability

Published Mar 15, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ntopng did not properly seed its random number
generator, leading to predictable session tokens. An attacker could use
this vulnerability to hijack a user's session.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS ntopng 2.2+dfsg1-1ubuntu0.1~esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS ntopng 3.2+dfsg1-1ubuntu0.1~esm2

Vulnerabilities 1

  • Unscored —
    CVE-2018-12520 Public exploit EPSS 10%

    An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seed…

    ntopng Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-12520