Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0016HistoryMar 24, 2014 - 4:31 p.m.
CVE-2014-0016
2014-03-2416:31:00
Debian Security Bug Tracker
security-tracker.debian.org
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
71.2%
stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | stunnel4 | <Β 3:5.68-2+deb12u1 | stunnel4_3:5.68-2+deb12u1_all.deb |
| Debian | 11 | all | stunnel4 | <Β 3:5.56+dfsg-10 | stunnel4_3:5.56+dfsg-10_all.deb |
| Debian | 10 | all | stunnel4 | <Β 3:5.50-3 | stunnel4_3:5.50-3_all.deb |
| Debian | 999 | all | stunnel4 | <Β 3:5.72-3 | stunnel4_3:5.72-3_all.deb |
| Debian | 13 | all | stunnel4 | <Β 3:5.72-3 | stunnel4_3:5.72-3_all.deb |
Related
gentoo
gentoo
stunnel: Information disclosure
2014-08-29 00:00:00
mageia
mageia
Updated stunnel package fixes security vulnerability
2014-03-31 23:40:37
cve
cve
CVE-2014-0016
2014-03-24 16:31:00
kaspersky
kaspersky
KLA10342 OSI vulnerability in Stunnel
2014-06-24 00:00:00
securityvulns
securityvulns
[ MDVSA-2015:096 ] stunnel
2015-04-20 00:00:00
stunnel crypto vulnerabilities
2015-04-20 00:00:00
seebug
seebug
Stunnel PRINGεε§εζΌζ΄
2014-03-11 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201408-14
2015-09-29 00:00:00
Mageia: Security Advisory (MGASA-2014-0144)
2022-01-28 00:00:00
Fedora Update for stunnel FEDORA-2014-5321
2014-05-05 00:00:00
prion
prion
Code injection
2014-03-24 16:31:00
ubuntucve
ubuntucve
CVE-2014-0016
2014-03-24 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : stunnel (MDVSA-2015:096)
2015-03-30 00:00:00
GLSA-201408-14 : stunnel: Information disclosure
2014-08-30 00:00:00
stunnel < 5.00 PRNG State Security Weakness
2014-03-26 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: stunnel-5.01-1.fc20
2014-04-30 04:07:51
[SECURITY] Fedora 19 Update: stunnel-5.01-1.fc19
2014-04-30 04:04:04
rosalinux
rosalinux
Advisory ROSA-SA-2021-1978
2021-07-02 18:10:58
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
71.2%
Related for DEBIANCVE:CVE-2014-0016