{"id":"CVE-2014-0017","aliases":["DEBIAN-CVE-2014-0017","DSA-2879-1","EUVD-2014-0118","GHSA-mw96-qp3x-6qgr","MGASA-2014-0119","openSUSE-SU-2024:10036-1"],"status":"published","title":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset...","description":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00356,"percentile":0.29513,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2014-03-05T23:17:12Z","modified":"2026-10-23T15:47:39Z","fixes":[{"ecosystem":"Debian:12","package":"libssh","fixed_in":["0.5.4-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libssh","fixed_in":["0.5.4-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libssh","fixed_in":["0.5.4-3"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libssh","fixed_in":["0.4.5-3+squeeze2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libssh","fixed_in":["0.5.4-1+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"libssh","fixed_in":["0.5.4-1.1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"libssh","fixed_in":["0.5.5-2.1.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-3"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.5-3+squeeze2"}]}],"versions":["0.4.5-3","0.4.5-3+squeeze1"]},{"source":"osv","ecosystem":"Debian:7","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-1+deb7u1"}]}],"versions":["0.5.4-1"]},{"source":"osv","ecosystem":"Mageia:3","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-1.1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-2.1.mga4"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-2.1"}]}],"bundled":7}],"products":[{"vendor":"libssh","product":"libssh"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2145-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2879","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/57407","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/05/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-03/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072191","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0017"},{"url":"http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release"},{"url":"https://github.com/advisories/GHSA-mw96-qp3x-6qgr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-0017","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0119.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0017","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3146","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-0017","description":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.","status":"published","published":"2014-03-14T15:00:00Z","modified":"2024-08-06T08:58:26.568Z","updated_at":"2026-11-02T14:33:47.741012Z"}],"euvd":[{"id":"EUVD-2014-0118","description":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.","status":"published","published":"2014-03-14T15:00:00Z","modified":"2024-08-06T08:58:26Z","updated_at":"2026-11-03T01:57:23.42372Z"}],"ghsa":[{"id":"GHSA-mw96-qp3x-6qgr","title":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset...","description":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.","status":"published","published":"2022-05-17T04:48:31Z","modified":"2025-04-12T12:31:29Z","updated_at":"2026-11-02T15:01:16.95233Z"}],"nvd":[{"id":"CVE-2014-0017","description":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.","status":"published","published":"2014-03-14T15:55:05.603Z","modified":"2026-06-17T00:02:05.843Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:53.710973Z"}],"osv":[{"id":"CVE-2014-0017","description":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.","status":"published","published":"2014-03-14T15:55:05Z","modified":"2026-04-16T06:19:23.685274186Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-0017","description":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.","status":"published","published":"2014-03-14T15:55:05.603Z","modified":"2026-10-23T15:47:39.570929783Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DSA-2879-1","title":"libssh - security update","status":"published","published":"2014-03-13T00:00:00Z","modified":"2026-03-09T01:22:19.664798Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0119","title":"Updated libssh package fixes security vulnerability","description":"When using libssh before 0.6.3, a libssh-based server, when accepting a\nnew connection, forks and the child process handles the request. The\nRAND_bytes() function of openssl doesn't reset its state after the fork,\nbut simply adds the current process id (getpid) to the PRNG state, which\nis not guaranteed to be unique. The most important consequence is that\nservers using EC (ECDSA) or DSA certificates may under certain conditions\nleak their private key (CVE-2014-0017).\n","status":"published","published":"2014-03-05T23:17:12Z","modified":"2026-04-16T06:23:42.29483881Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10036-1","title":"libssh-devel-0.7.2-2.1 on GA media","description":"These are all security issues fixed in the libssh-devel-0.7.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:40:55.349655Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}