CVE-2015-0285

CVE-2015-0285 describes a weakness in the ssl3_client_hello function of OpenSSL versions prior to 1.0.2a, where the Pseudo-Random Number Generator (PRNG) was not guaranteed to be seeded before a handshake. This flaw could allow remote attackers to compromise cryptographic protections through network sniffing and brute-force attacks. With a CVSS score of 4.3 (medium severity), it requires moderate attack complexity and could lead to partial confidentiality compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.