CVE-2014-0016

Published: Mar 24, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates.

Affected (113)

Products: Stunnel: Stunnel

Stunnel

1 product

Stunnel

Configuration A

113 vulnerable

Vulnerable Software	Affected Versions
Stunnel Stunnel	Up to 4.56
Stunnel Stunnel	Version 0.1
Stunnel Stunnel	Version 1.0
Stunnel Stunnel	Version 1.1
Stunnel Stunnel	Version 1.2
Stunnel Stunnel	Version 1.3
Stunnel Stunnel	Version 1.4
Stunnel Stunnel	Version 1.5
Stunnel Stunnel	Version 1.6
Stunnel Stunnel	Version 2.0
Stunnel Stunnel	Version 2.1
Stunnel Stunnel	Version 3.0
Stunnel Stunnel	Version 3.0 b1
Stunnel Stunnel	Version 3.0 b2
Stunnel Stunnel	Version 3.0 b3
Stunnel Stunnel	Version 3.0 b4
Stunnel Stunnel	Version 3.0 b5
Stunnel Stunnel	Version 3.0 b6
Stunnel Stunnel	Version 3.0 b7
Stunnel Stunnel	Version 3.10
Stunnel Stunnel	Version 3.11
Stunnel Stunnel	Version 3.12
Stunnel Stunnel	Version 3.13
Stunnel Stunnel	Version 3.14
Stunnel Stunnel	Version 3.15
Stunnel Stunnel	Version 3.16
Stunnel Stunnel	Version 3.17
Stunnel Stunnel	Version 3.18
Stunnel Stunnel	Version 3.19
Stunnel Stunnel	Version 3.1
Stunnel Stunnel	Version 3.20
Stunnel Stunnel	Version 3.21
Stunnel Stunnel	Version 3.21a
Stunnel Stunnel	Version 3.21b
Stunnel Stunnel	Version 3.21c
Stunnel Stunnel	Version 3.22
Stunnel Stunnel	Version 3.23
Stunnel Stunnel	Version 3.24
Stunnel Stunnel	Version 3.25
Stunnel Stunnel	Version 3.26
Stunnel Stunnel	Version 3.2
Stunnel Stunnel	Version 3.3
Stunnel Stunnel	Version 3.4a
Stunnel Stunnel	Version 3.5
Stunnel Stunnel	Version 3.6
Stunnel Stunnel	Version 3.7
Stunnel Stunnel	Version 3.8
Stunnel Stunnel	Version 3.8 p1
Stunnel Stunnel	Version 3.8 p2
Stunnel Stunnel	Version 3.8 p3
Stunnel Stunnel	Version 3.8 p4
Stunnel Stunnel	Version 3.8p1
Stunnel Stunnel	Version 3.8p2
Stunnel Stunnel	Version 3.8p3
Stunnel Stunnel	Version 3.8p4
Stunnel Stunnel	Version 3.9
Stunnel Stunnel	Version 4.00
Stunnel Stunnel	Version 4.01
Stunnel Stunnel	Version 4.02
Stunnel Stunnel	Version 4.03
Stunnel Stunnel	Version 4.04
Stunnel Stunnel	Version 4.05
Stunnel Stunnel	Version 4.06
Stunnel Stunnel	Version 4.07
Stunnel Stunnel	Version 4.08
Stunnel Stunnel	Version 4.09
Stunnel Stunnel	Version 4.0
Stunnel Stunnel	Version 4.10
Stunnel Stunnel	Version 4.11
Stunnel Stunnel	Version 4.12
Stunnel Stunnel	Version 4.13
Stunnel Stunnel	Version 4.14
Stunnel Stunnel	Version 4.15
Stunnel Stunnel	Version 4.16
Stunnel Stunnel	Version 4.17
Stunnel Stunnel	Version 4.18
Stunnel Stunnel	Version 4.19
Stunnel Stunnel	Version 4.20
Stunnel Stunnel	Version 4.21
Stunnel Stunnel	Version 4.22
Stunnel Stunnel	Version 4.23
Stunnel Stunnel	Version 4.24
Stunnel Stunnel	Version 4.25
Stunnel Stunnel	Version 4.26
Stunnel Stunnel	Version 4.27
Stunnel Stunnel	Version 4.28
Stunnel Stunnel	Version 4.29
Stunnel Stunnel	Version 4.30
Stunnel Stunnel	Version 4.31
Stunnel Stunnel	Version 4.32
Stunnel Stunnel	Version 4.33
Stunnel Stunnel	Version 4.34
Stunnel Stunnel	Version 4.35
Stunnel Stunnel	Version 4.36
Stunnel Stunnel	Version 4.37
Stunnel Stunnel	Version 4.38
Stunnel Stunnel	Version 4.39
Stunnel Stunnel	Version 4.40
Stunnel Stunnel	Version 4.41
Stunnel Stunnel	Version 4.42
Stunnel Stunnel	Version 4.43
Stunnel Stunnel	Version 4.44
Stunnel Stunnel	Version 4.45
Stunnel Stunnel	Version 4.46
Stunnel Stunnel	Version 4.47
Stunnel Stunnel	Version 4.48
Stunnel Stunnel	Version 4.49
Stunnel Stunnel	Version 4.50
Stunnel Stunnel	Version 4.51
Stunnel Stunnel	Version 4.52
Stunnel Stunnel	Version 4.53
Stunnel Stunnel	Version 4.54
Stunnel Stunnel	Version 4.55