CVE-2020-27743

The CVE-2020-27743 entry affects libtac in pam_tacplus up to version 1.5.1, where RAND_bytes()/RAND_pseudo_bytes() failures are not checked. This can allow a non-random/predictable session_id, enabling partial confidentiality/integrity risk as described in the CVE. Affected platforms include Phot...

The vulnerability of the PHP interpreter, which allows a hacker to break the cryptographic security mechanism

The vulnerability of the opensslrandompseudobytes function ext/openssl/openssl.c in the PHP interpreter is related to improper interaction with the outdated RANDpseudobytes function. Exploiting this vulnerability can allow a remote attacker to break the cryptographic security mechanism...

CVE-2015-8867

CVE-2015-8867 affects PHP’s cryptographic path: openssl_random_pseudo_bytes (ext/openssl/openssl.c) on PHP versions pre-5.4.44, pre-5.5.28 in 5.5.x, and pre-5.6.12 in 5.6.x. The issue stems from relying on the deprecated RAND_pseudo_bytes, which can weaken cryptographic protections. The descripti...