Skip to content
OpenAdvisories
Unscored Public exploit CVE-2008-0166 EUVD-2008-0178GHSA-4xrg-5554-qffr

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable…

Published May 13, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Package: openssh Package: openssl Ecosystem: Debian

Description

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 openssh 4.7p1-9 —
Debian 14 openssl 0.9.8g-9 —
Debian 13 openssh 4.7p1-9 —
Debian 13 openssl 0.9.8g-9 —
Debian 12 openssh 4.7p1-9 —
Debian 12 openssl 0.9.8g-9 —
Debian 4.0 openssh 1:4.3p2-9etch2 DSA-1576-1
Debian 4.0 openssl 0.9.8c-4etch3 DSA-1571-1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 7 repositories

  • g0tmi1k/debian-ssh ★ 409 · Sep 22, 2013

    Debian OpenSSL Predictable PRNG (CVE-2008-0166)

  • demining/Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166 ★ 10 · Aug 26, 2022

    Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 0.9.8 CVE-2008-0166

  • badkeys/debianopenssl ★ 7 · May 15, 2022

    Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

  • avarx/vulnkeys ★ 1 · Dec 31, 2018

    Debian OpenSSL Predictable PRNG (CVE-2008-0166)

  • FaizanAli8232/CVE-Exploit-Research-Development ★ 0 · Mar 18, 2026

    A professional Python tool designed for educational penetration testing, demonstrating SSH vulnerabilities (CVE-2008-0166 / CVE-2008-1657) with interactive shell access, command logging, and automate…

  • QasimShahbaz21/CVE-Exploit-Research-Development ★ 0 · Mar 18, 2026

    SSH Exploit Tool (Educational Use Only) 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive s…

  • AhegaoPsyops/sslWeakness ★ 0 · Sep 25, 2025

    Example script demonstrating a weak PRNG, CVE-2008-0166

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 2

References