Skip to content
OpenAdvisories
Unscored DSA-1576-1 4 CVEs

openssh openssh-blacklist - predictable randomness

Published May 14, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 openssh 1:4.3p2-9etch2

Vulnerabilities 4

  • Unscored —

    ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 co…

  • Unscored —
    CVE-2008-0166 Public exploit EPSS 71%

    OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that g…

  • Unscored —

    OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set …

  • Unscored —

    The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain opt…