PT-2014-1893 · Openssl+3 · Openssl+3

Published 2014-03-05 · Updated 2024-06-15 · CVE-2014-0017

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.6.3

Description The issue is related to the RAND bytes function in libssh, which does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG) when forking is enabled. This causes the state to be shared between child processes, allowing local users to obtain sensitive information by leveraging a pid collision. The vulnerability can be exploited locally and may lead to a breach of confidentiality.

Recommendations For libssh versions prior to 0.6.3, update to version 0.6.3 or later to resolve the issue. As a temporary workaround, consider disabling forking in libssh to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

ALT-PU-2014-1366

BDU:2015-09759

CVE-2014-0017

DSA-2879-1

MGASA-2014-0119

OPENSUSE-SU-2024:10036-1

SUSE-SU-2014_0413-1

Affected Products

Alt Linux

Openssl

Suse

Libssh

References · 34

• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0017 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0017 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1366 · Vendor Advisory
• http://secunia.com/advisories/57407 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0119.html · Security Note
• http://lists.opensuse.org/opensuse-updates/2014-03/msg00040.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10036-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2145-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09759 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-0017 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0119 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html · Vendor Advisory
• http://libssh.org/2014/03/04/libssh-0-6-3-security-release · Vendor Advisory
• http://debian.org/security/2014/dsa-2879 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0017 · Security Note