UpHeron
All vulnerabilities

Servers and applications

CVE-2011-0766

The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys.

Severity
High 7.8
Published
31 May 2011
Last changed
16 Jun 2026
Added to UpHeron
16 Oct 2026
Exploit chance
3.1% in the next 30 daysHigher than 87% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
CWE-310
Attack
Over the network · No login needed
Attacker can
Read data
CVSS vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • Version r14b02
  • Version r14b01
  • Version r14b
  • Version r14a
All 10 release lines
  • Version r11b-5
  • Version r12b-5
  • Version r13b
  • Version r13b02-1
  • Version r13b03
  • Version r13b04
  • Version r14a
  • Version r14b
  • Version r14b01
  • Version r14b02

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2011-0766
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2011-0766