Debian/libssh: unknown
The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared bet
Action: Upgrade libssh to 0.5.4-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.4-3 | - |
Fixed versions
| 0.5.4-3 |
Sources
- osv: DEBIAN-CVE-2014-0017#Debian:13/libssh
- https://security-tracker.debian.org/tracker/CVE-2014-0017
published · modified · JSON