The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php | Php | 5.4.0 | * |
| Php | Php | 5.5.0 | * |
| Php | Php | 5.6.0 | * |