What’s Vulnerable › Vulnerabilities

CVE-2001-1141

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-07-10 · updated 2026-06-16

Description

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

Affected products

• OpenSSL: 0.9.1c, 0.9.2b, 0.9.3, 0.9.4, 0.9.5, 0.9.6 (+1)
• Ssleay: 0.8.1, 0.9, 0.9.1

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0
• http://www.linuxsecurity.com/advisories/other_advisory-1483.html
• http://www.osvdb.org/853
• http://www.redhat.com/support/errata/RHSA-2001-051.html
• http://www.securityfocus.com/advisories/3475
• http://www.securityfocus.com/archive/1/195829
• http://www.securityfocus.com/bid/3004
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6823
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418

Get alerted when CVE-2001-1141 or the next vulnerability affects your stack