CVE Vulnerabilities

CVE-2011-0766

Published: May 31, 2011 | Modified: Sep 25, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
LOW

The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys.

Affected Software

Name Vendor Start Version End Version
Crypto Erlang * 2.0.2.1 (including)
Erlang/otp Erlang r11b-5 (including) r11b-5 (including)
Erlang/otp Erlang r12b-5 (including) r12b-5 (including)
Erlang/otp Erlang r13b (including) r13b (including)
Erlang/otp Erlang r13b02-1 (including) r13b02-1 (including)
Erlang/otp Erlang r13b03 (including) r13b03 (including)
Erlang/otp Erlang r13b04 (including) r13b04 (including)
Erlang/otp Erlang r14a (including) r14a (including)
Erlang/otp Erlang r14b (including) r14b (including)
Erlang/otp Erlang r14b01 (including) r14b01 (including)
Erlang/otp Erlang r14b02 (including) r14b02 (including)
Ssh Ssh * 2.0.4 (including)
Erlang Ubuntu hardy *
Erlang Ubuntu lucid *
Erlang Ubuntu maverick *
Erlang Ubuntu natty *
Erlang Ubuntu oneiric *
Erlang Ubuntu upstream *

References