CVE-2013-4442: Pwgen Project Pwgen

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

Affected products

• Pwgen Project Pwgen: up to and including 2.06

Published 2014-12-19. Last modified 2026-06-16.