The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL prior to 0.9.6b allows malicious users to use the output of small PRNG requests to determine the internal state information, which could be used by malicious users to predict future pseudo-random numbers.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
openssl openssl 0.9.1c |
||
openssl openssl 0.9.2b |
||
ssleay ssleay 0.9 |
||
ssleay ssleay 0.9.1 |
||
openssl openssl 0.9.3 |
||
openssl openssl 0.9.4 |
||
openssl openssl 0.9.5 |
||
openssl openssl 0.9.6 |
||
openssl openssl 0.9.6a |
||
ssleay ssleay 0.8.1 |
Vulmon