CVE-2014-0017
LOW—CVSS v3
1.9CVSS v2
0.09%
EPSS (exploit probability)
CWE-310CWE
Description
The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.
Affected routers (0)
No routers currently mapped to this CVE in our database.