63 matches found
DEBIAN-CVE-2014-0017
The RANDbytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator PRNG, which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid...
1.9CVSS6.2AI score0.00356EPSS
SaveExploits1References1
PYSEC-2013-29
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...
4.3CVSS7.2AI score0.01745EPSS
SaveExploits1References4
20