CVE-2014-0017
First published: Tue Mar 04 2014(Updated: )
A flaw was found in libssh server. When accepting a new connection, the server forks and the child process handles the request. The RAND_bytes() function of openssl doesn't reset its state after the fork, but simply adds the current process id (getpid) to the PRNG state, which is not guaranteed to be unique. The most important consequence is that servers using EC (ECDSA) or DSA certificates may under certain conditions leak their private key.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libssh Libssh | <=0.6.2 | |
| Libssh Libssh | =0.4.7 | |
| Libssh Libssh | =0.4.8 | |
| Libssh Libssh | =0.5.0 | |
| Libssh Libssh | =0.5.0-rc1 | |
| Libssh Libssh | =0.5.1 | |
| Libssh Libssh | =0.5.2 | |
| Libssh Libssh | =0.5.3 | |
| Libssh Libssh | =0.5.4 | |
| Libssh Libssh | =0.5.5 | |
| Libssh Libssh | =0.6.0 | |
| Libssh Libssh | =0.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.libssh.org/projects/libssh.git/commit/?id=e99246246b4061f7e71463f8806b9dcad65affa0
- http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1072739
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1072740
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1072741
- https://bugzilla.redhat.com/show_bug.cgi?id=1072191
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00040.html
- http://secunia.com/advisories/57407
- http://www.debian.org/security/2014/dsa-2879
- http://www.openwall.com/lists/oss-security/2014/03/05/1
- http://www.ubuntu.com/usn/USN-2145-1
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/author
- agent/severity
- agent/last-modified-date
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-0017
- agent/tags
- agent/trending
- vendor/libssh
- canonical/libssh libssh
- version/libssh libssh/0.6.2
- version/libssh libssh/0.4.7
- version/libssh libssh/0.4.8
- version/libssh libssh/0.5.0
- version/libssh libssh/0.5.0-rc1
- version/libssh libssh/0.5.1
- version/libssh libssh/0.5.2
- version/libssh libssh/0.5.3
- version/libssh libssh/0.5.4
- version/libssh libssh/0.5.5
- version/libssh libssh/0.6.0
- version/libssh libssh/0.6.1