CVE-2018-16115 json
Cryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor
published 2018-08-29 8 y ago modified 2026-06-17 4 mo ago also GHSA-mr95-9rr4-668f , EUVD-2018-0643
- cvss
- 9.1
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.2%
- EPSS 1.2% chance of exploitation in 30 days, percentile 68%
- public exploits
- 0
- none known
Summary
Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for TLS (both classic and Artery Remoting). Akka allows configuration of custom random number generators. For historical reasons, Akka included the AES128CounterSecureRNG and AES256CounterSecureRNG random number generators. The implementations had a bug that caused the generated numbers to be repeated after only a few bytes. The custom RNG implementations were not configured by default but examples in the documentation showed (and therefore implicitly recommended) using the custom ones. This can be used by an attacker to compromise the communication if these random number generators are enabled in configuration. It would be possible to eavesdrop, replay, or modify the messages sent with Akka Remoting/Cluster.
Patch / fix
- maven com.typesafe.akka:akka-actor_2.11 2.5.16
- maven com.typesafe.akka:akka-actor_2.12 2.5.16
- lightbend akka 2.5.16
Exploit prediction
1.19% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:P/A:N |
| GitHub | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | com.typesafe.akka:akka-actor_2.11 | >=2.5.0, <2.5.16 |
2.5.16 |
| maven | com.typesafe.akka:akka-actor_2.12 | >=2.5.0, <2.5.16 |
2.5.16 |
Classification
- Weakness
-
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
References
-
doc.akka.io
/docs/akka/current/security/2018-08-29-aes-rng.html
web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2018-16115
advisory
-
github.com
/advisories/GHSA-mr95-9rr4-668f
advisory
Sources
- CVE List CVE-2018-16115
- GitHub Advisory GHSA-mr95-9rr4-668f
- NVD CVE-2018-16115
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.