CVE-2007-5502 The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes i...
MediumCVSS 6.4
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openssl fips object module | = 1.1.1 | No fix listed |
References
- 27859 patch third-party-advisory vendor-advisory
- VU#150249 third-party-advisory us-government-resource
- www.openssl.org
- 26652 patch vdb-entry
- 1019029 vdb-entry
- ADV-2007-4044 vdb-entry
- openssl-fips-prng-security-bypass(38796) vdb-entry