Unscored DSA-1571-1 3 CVEs

openssl - predictable random number generator

Published May 13, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	openssl	0.9.8c-4etch3

Vulnerabilities 3

Unscored —

CVE-2007-3108

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgome…

openssl Debian

Aug 8, 2007
Unscored —

CVE-2007-4995 EPSS 11%

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary…

openssl Debian

Oct 13, 2007
Unscored —

CVE-2008-0166 Public exploit EPSS 71%

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that g…

openssl openssh Debian

May 13, 2008