CVE-2007-5502

The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is…

published December 1, 2007

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02312 · 83.2th percentile
Published
2007-12-01T02:00Z
EPSS history
Timeline
  • 01 DEC 02:00Z
    The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is…
    cvelistv5