Unscored severity · published Dec 1, 2007
CVE-2007-5502
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Fips Object Module · Openssl
1.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5502
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5502
Patch
http://secunia.com/advisories/27859
US Government Resource
http://www.kb.cert.org/vuls/id/150249
www.openssl.org
http://www.openssl.org/news/secadv_20071129.txt
Patch
http://www.securityfocus.com/bid/26652
www.securitytracker.com
http://www.securitytracker.com/id?1019029
www.vupen.com
http://www.vupen.com/english/advisories/2007/4044