Test ID:	1.3.6.1.4.1.25623.1.0.121258
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201408-14
Summary:	Gentoo Linux Local Security Checks GLSA 201408-14
Description:	Summary: Gentoo Linux Local Security Checks GLSA 201408-14 Vulnerability Insight: stunnel does not properly update the state of the pseudo-random generator after fork-threading which causes subsequent children with the same process ID to use the same entropy pool. ECDSA and DSA keys, when not used in deterministic mode (RFC6979), rely on random data for its k parameter to not leak private key information. Solution: Update the affected packages to the latest available version. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0016 65964 http://www.securityfocus.com/bid/65964 [oss-security] 20140305 libssh and stunnel PRNG flaws http://www.openwall.com/lists/oss-security/2014/03/05/1 https://bugzilla.redhat.com/attachment.cgi?id=870826&action=diff https://bugzilla.redhat.com/show_bug.cgi?id=1072180 https://www.stunnel.org/sdf_ChangeLog.html
Copyright	Copyright (C) 2015 Eero Volotinen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.