stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates.
The lack of entropy available for, or used by, a Pseudo-Random Number Generator (PRNG) can be a stability and security threat.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Stunnel | Stunnel | * | 4.56 (including) |
| Stunnel | Stunnel | 0.1 (including) | 0.1 (including) |
| Stunnel | Stunnel | 1.0 (including) | 1.0 (including) |
| Stunnel | Stunnel | 1.1 (including) | 1.1 (including) |
| Stunnel | Stunnel | 1.2 (including) | 1.2 (including) |
| Stunnel | Stunnel | 1.3 (including) | 1.3 (including) |
| Stunnel | Stunnel | 1.4 (including) | 1.4 (including) |
| Stunnel | Stunnel | 1.5 (including) | 1.5 (including) |
| Stunnel | Stunnel | 1.6 (including) | 1.6 (including) |
| Stunnel | Stunnel | 2.0 (including) | 2.0 (including) |
| Stunnel | Stunnel | 2.1 (including) | 2.1 (including) |
| Stunnel | Stunnel | 3.0 (including) | 3.0 (including) |
| Stunnel | Stunnel | 3.0-b1 (including) | 3.0-b1 (including) |
| Stunnel | Stunnel | 3.0-b2 (including) | 3.0-b2 (including) |
| Stunnel | Stunnel | 3.0-b3 (including) | 3.0-b3 (including) |
| Stunnel | Stunnel | 3.0-b4 (including) | 3.0-b4 (including) |
| Stunnel | Stunnel | 3.0-b5 (including) | 3.0-b5 (including) |
| Stunnel | Stunnel | 3.0-b6 (including) | 3.0-b6 (including) |
| Stunnel | Stunnel | 3.0-b7 (including) | 3.0-b7 (including) |
| Stunnel | Stunnel | 3.1 (including) | 3.1 (including) |
| Stunnel | Stunnel | 3.2 (including) | 3.2 (including) |
| Stunnel | Stunnel | 3.3 (including) | 3.3 (including) |
| Stunnel | Stunnel | 3.4a (including) | 3.4a (including) |
| Stunnel | Stunnel | 3.5 (including) | 3.5 (including) |
| Stunnel | Stunnel | 3.6 (including) | 3.6 (including) |
| Stunnel | Stunnel | 3.7 (including) | 3.7 (including) |
| Stunnel | Stunnel | 3.8 (including) | 3.8 (including) |
| Stunnel | Stunnel | 3.8-p1 (including) | 3.8-p1 (including) |
| Stunnel | Stunnel | 3.8-p2 (including) | 3.8-p2 (including) |
| Stunnel | Stunnel | 3.8-p3 (including) | 3.8-p3 (including) |
| Stunnel | Stunnel | 3.8-p4 (including) | 3.8-p4 (including) |
| Stunnel | Stunnel | 3.8p1 (including) | 3.8p1 (including) |
| Stunnel | Stunnel | 3.8p2 (including) | 3.8p2 (including) |
| Stunnel | Stunnel | 3.8p3 (including) | 3.8p3 (including) |
| Stunnel | Stunnel | 3.8p4 (including) | 3.8p4 (including) |
| Stunnel | Stunnel | 3.9 (including) | 3.9 (including) |
| Stunnel | Stunnel | 3.10 (including) | 3.10 (including) |
| Stunnel | Stunnel | 3.11 (including) | 3.11 (including) |
| Stunnel | Stunnel | 3.12 (including) | 3.12 (including) |
| Stunnel | Stunnel | 3.13 (including) | 3.13 (including) |
| Stunnel | Stunnel | 3.14 (including) | 3.14 (including) |
| Stunnel | Stunnel | 3.15 (including) | 3.15 (including) |
| Stunnel | Stunnel | 3.16 (including) | 3.16 (including) |
| Stunnel | Stunnel | 3.17 (including) | 3.17 (including) |
| Stunnel | Stunnel | 3.18 (including) | 3.18 (including) |
| Stunnel | Stunnel | 3.19 (including) | 3.19 (including) |
| Stunnel | Stunnel | 3.20 (including) | 3.20 (including) |
| Stunnel | Stunnel | 3.21 (including) | 3.21 (including) |
| Stunnel | Stunnel | 3.21a (including) | 3.21a (including) |
| Stunnel | Stunnel | 3.21b (including) | 3.21b (including) |
| Stunnel | Stunnel | 3.21c (including) | 3.21c (including) |
| Stunnel | Stunnel | 3.22 (including) | 3.22 (including) |
| Stunnel | Stunnel | 3.23 (including) | 3.23 (including) |
| Stunnel | Stunnel | 3.24 (including) | 3.24 (including) |
| Stunnel | Stunnel | 3.25 (including) | 3.25 (including) |
| Stunnel | Stunnel | 3.26 (including) | 3.26 (including) |
| Stunnel | Stunnel | 4.00 (including) | 4.00 (including) |
| Stunnel | Stunnel | 4.0 (including) | 4.0 (including) |
| Stunnel | Stunnel | 4.01 (including) | 4.01 (including) |
| Stunnel | Stunnel | 4.02 (including) | 4.02 (including) |
| Stunnel | Stunnel | 4.03 (including) | 4.03 (including) |
| Stunnel | Stunnel | 4.04 (including) | 4.04 (including) |
| Stunnel | Stunnel | 4.05 (including) | 4.05 (including) |
| Stunnel | Stunnel | 4.06 (including) | 4.06 (including) |
| Stunnel | Stunnel | 4.07 (including) | 4.07 (including) |
| Stunnel | Stunnel | 4.08 (including) | 4.08 (including) |
| Stunnel | Stunnel | 4.09 (including) | 4.09 (including) |
| Stunnel | Stunnel | 4.10 (including) | 4.10 (including) |
| Stunnel | Stunnel | 4.11 (including) | 4.11 (including) |
| Stunnel | Stunnel | 4.12 (including) | 4.12 (including) |
| Stunnel | Stunnel | 4.13 (including) | 4.13 (including) |
| Stunnel | Stunnel | 4.14 (including) | 4.14 (including) |
| Stunnel | Stunnel | 4.15 (including) | 4.15 (including) |
| Stunnel | Stunnel | 4.16 (including) | 4.16 (including) |
| Stunnel | Stunnel | 4.17 (including) | 4.17 (including) |
| Stunnel | Stunnel | 4.18 (including) | 4.18 (including) |
| Stunnel | Stunnel | 4.19 (including) | 4.19 (including) |
| Stunnel | Stunnel | 4.20 (including) | 4.20 (including) |
| Stunnel | Stunnel | 4.21 (including) | 4.21 (including) |
| Stunnel | Stunnel | 4.22 (including) | 4.22 (including) |
| Stunnel | Stunnel | 4.23 (including) | 4.23 (including) |
| Stunnel | Stunnel | 4.24 (including) | 4.24 (including) |
| Stunnel | Stunnel | 4.25 (including) | 4.25 (including) |
| Stunnel | Stunnel | 4.26 (including) | 4.26 (including) |
| Stunnel | Stunnel | 4.27 (including) | 4.27 (including) |
| Stunnel | Stunnel | 4.28 (including) | 4.28 (including) |
| Stunnel | Stunnel | 4.29 (including) | 4.29 (including) |
| Stunnel | Stunnel | 4.30 (including) | 4.30 (including) |
| Stunnel | Stunnel | 4.31 (including) | 4.31 (including) |
| Stunnel | Stunnel | 4.32 (including) | 4.32 (including) |
| Stunnel | Stunnel | 4.33 (including) | 4.33 (including) |
| Stunnel | Stunnel | 4.34 (including) | 4.34 (including) |
| Stunnel | Stunnel | 4.35 (including) | 4.35 (including) |
| Stunnel | Stunnel | 4.36 (including) | 4.36 (including) |
| Stunnel | Stunnel | 4.37 (including) | 4.37 (including) |
| Stunnel | Stunnel | 4.38 (including) | 4.38 (including) |
| Stunnel | Stunnel | 4.39 (including) | 4.39 (including) |
| Stunnel | Stunnel | 4.40 (including) | 4.40 (including) |
| Stunnel | Stunnel | 4.41 (including) | 4.41 (including) |
| Stunnel | Stunnel | 4.42 (including) | 4.42 (including) |
| Stunnel | Stunnel | 4.43 (including) | 4.43 (including) |
| Stunnel | Stunnel | 4.44 (including) | 4.44 (including) |
| Stunnel | Stunnel | 4.45 (including) | 4.45 (including) |
| Stunnel | Stunnel | 4.46 (including) | 4.46 (including) |
| Stunnel | Stunnel | 4.47 (including) | 4.47 (including) |
| Stunnel | Stunnel | 4.48 (including) | 4.48 (including) |
| Stunnel | Stunnel | 4.49 (including) | 4.49 (including) |
| Stunnel | Stunnel | 4.50 (including) | 4.50 (including) |
| Stunnel | Stunnel | 4.51 (including) | 4.51 (including) |
| Stunnel | Stunnel | 4.52 (including) | 4.52 (including) |
| Stunnel | Stunnel | 4.53 (including) | 4.53 (including) |
| Stunnel | Stunnel | 4.54 (including) | 4.54 (including) |
| Stunnel | Stunnel | 4.55 (including) | 4.55 (including) |
| Stunnel4 | Ubuntu | artful | * |
| Stunnel4 | Ubuntu | bionic | * |
| Stunnel4 | Ubuntu | devel | * |
| Stunnel4 | Ubuntu | lucid | * |
| Stunnel4 | Ubuntu | precise | * |
| Stunnel4 | Ubuntu | quantal | * |
| Stunnel4 | Ubuntu | saucy | * |
| Stunnel4 | Ubuntu | upstream | * |
| Stunnel4 | Ubuntu | utopic | * |
| Stunnel4 | Ubuntu | vivid | * |
| Stunnel4 | Ubuntu | wily | * |
| Stunnel4 | Ubuntu | xenial | * |
| Stunnel4 | Ubuntu | yakkety | * |
| Stunnel4 | Ubuntu | zesty | * |