Libssh CVE-2014-0017 Random Number Generator Weakness

Bugtraq ID:	65963
Class:	Design Error
CVE:	CVE-2014-0017
Remote:	Yes
Local:	No
Published:	Mar 04 2014 12:00AM
Updated:	May 07 2015 06:09PM
Credit:	Aris Adamantiadis
Vulnerable:	Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Libssh CVE-2014-0017 Random Number Generator Weakness

Libssh is prone to a random-number-generator weakness.

An attacker can exploit this weakness to predict random number values that can aid in further attacks.

Libssh prior to 0.6.3 are vulnerable.

Libssh CVE-2014-0017 Random Number Generator Weakness

An attacker can exploit this issue using readily available tools.

Libssh CVE-2014-0017 Random Number Generator Weakness

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Libssh CVE-2014-0017 Random Number Generator Weakness

References: