Botan: Insufficiently seeded random number generator in AutoSeeded_RNG
Botan is a C++ cryptography library. In versions 3.7.0 up to 3.13.0, AutoSeeded_RNG can mark itself as seeded without consulting the configured entropy source if an application clears the generator and then requests empty output while it is unseeded. On builds without a system RNG, later non-empty requests can then produce output from predictable state, which may weaken keys, nonces or tokens. The attack vector is local with low privileges, and exploitation is not known.
randombit · Botan
