high
7.8
CWE
310
Advisory Published
Updated

CVE-2011-0766

First published: Tue May 31 2011(Updated: )

The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys.

Credit: cret@cert.org cret@cert.org

Affected SoftwareAffected VersionHow to fix
Erlang Crypto<=2.0.2.1
Erlang/OTP=r11b-5
Erlang/OTP=r12b-5
Erlang/OTP=r13b
Erlang/OTP=r13b02-1
Erlang/OTP=r13b03
Erlang/OTP=r13b04
Erlang/OTP=r14a
Erlang/OTP=r14b
Erlang/OTP=r14b01
Erlang/OTP=r14b02
SSH (Secure Shell)<=2.0.4
SSH (Secure Shell)=1.2.6
Erlang Crypto=1.4
SSH (Secure Shell)=1.2.0
Erlang/OTP<=r14b02
Erlang Crypto=1.2.1
Erlang Crypto=1.2.3
Erlang Crypto=1.2
Erlang Crypto=2.0.1
SSH (Secure Shell)=1.2.9
Erlang Crypto=1.1.3
SSH (Secure Shell)=1.2.21
SSH (Secure Shell)=1.2.15
Erlang Crypto=1.0
Erlang Crypto=1.1.1
SSH (Secure Shell)=1.2.4
SSH (Secure Shell)=1.2.14
SSH (Secure Shell)=1.2.19
Erlang Crypto=2.0
Erlang Crypto=1.6.2
Erlang Crypto=1.2.2
SSH (Secure Shell)=1.2.8
SSH (Secure Shell)=1.2.31
SSH (Secure Shell)=1.2.24
SSH (Secure Shell)=1.2.18
Erlang Crypto=1.5.2.1
SSH (Secure Shell)=1.2.7
SSH (Secure Shell)=1.2.20
SSH (Secure Shell)=1.2.3
Erlang Crypto=1.3
SSH (Secure Shell)=1.2.12
SSH (Secure Shell)=1.2.25
SSH (Secure Shell)=1.2.17
Erlang Crypto=2.0.2
SSH (Secure Shell)=1.2.30
Erlang Crypto=1.5
SSH (Secure Shell)=1.2.1
Erlang Crypto=1.5.2
SSH (Secure Shell)=1.2.26
Erlang Crypto=1.5.1.1
SSH (Secure Shell)=1.2.27
Erlang Crypto=1.6.3
SSH (Secure Shell)=1.2.16
SSH (Secure Shell)=1.2.28
Erlang Crypto=1.6.4
SSH (Secure Shell)=1.2.29
SSH (Secure Shell)=1.2.11
SSH (Secure Shell)=1.2.5
Erlang Crypto=1.1.2
Erlang Crypto=1.6
SSH (Secure Shell)=1.2.13
SSH (Secure Shell)=1.2.22
SSH (Secure Shell)=1.2.2
Erlang Crypto=1.1
SSH (Secure Shell)=1.2.23
Erlang Crypto=1.6.1
SSH (Secure Shell)=1.2.10
Erlang Crypto=1.5.3

Remedy

http://www.kb.cert.org/vuls/id/178990

Remedy

https://github.com/erlang/otp/commit/f228601de45c5b53241b103af6616453c50885a5

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2011-0766?

    The severity of CVE-2011-0766 is rated as high due to its potential for enabling remote attackers to guess DSA host and SSH session keys.

  • How do I fix CVE-2011-0766?

    To fix CVE-2011-0766, update the affected Erlang/OTP and SSH software to the latest versions that address this vulnerability.

  • What versions are affected by CVE-2011-0766?

    CVE-2011-0766 affects several versions of Erlang/OTP before R14B03 and SSH before 2.0.5.

  • Can CVE-2011-0766 be exploited remotely?

    Yes, CVE-2011-0766 can be exploited remotely, allowing attackers to potentially compromise keys used in SSH sessions.

  • Is CVE-2011-0766 related to weak random number generation?

    Yes, CVE-2011-0766 is related to weak random number generation due to predictable seeds based on the current time.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203