AIKIDO-2025-10978
wolfSSL.wolfssl is vulnerable to Insecure Randomness
70
High Risk
This Affects:
wolfSSL.wolfsslTL;DR
Affected versions of wolfssl are vulnerable to generating weak or predictable random values when applications call RAND_bytes() after fork() due to unexpected behavior in RAND_poll() within the OpenSSL compatibility layer. This issue can result in insufficiently reseeded randomness in child processes, potentially weakening security for applications that rely on RAND_bytes() post-fork, though internal TLS operations are not affected. Updating to a fixed version ensures the DRBG is properly reseeded after a fork.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
wolfSSL.wolfssl is vulnerable to Insecure Randomness in versions 3.15.0 - 5.8.0.
How to fix this
Upgrade the wolfSSL.wolfssl library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant