Description
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.vupen.com/english/advisories/2007/4044 ↗
- http://www.securityfocus.com/bid/26652 ↗
- http://www.securitytracker.com/id?1019029 ↗
- http://www.openssl.org/news/secadv_20071129.txt ↗
- http://secunia.com/advisories/27859 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38796 ↗
- http://www.kb.cert.org/vuls/id/150249 ↗