USN-612-1: OpenSSL vulnerability

🗓️ 13 May 2008 13:19:44Reported by UbuntuType

OpenSSL vulnerability on Ubuntu and Debian systems. Weak keys in OpenSSH, OpenVPN, and SSL certificates. Extremely serious, affects Ubuntu 7.04, 7.10, 8.04. All keys from affected systems untrustworthy after update

Reporter	Title	Published	Views	Family All 63
GithubExploit	Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl	18 Mar 202615:11	–	githubexploit
GithubExploit	Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl	22 Sep 201321:20	–	githubexploit
GithubExploit	Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl	18 Mar 202616:29	–	githubexploit
GithubExploit	Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl	18 Mar 202612:29	–	githubexploit
Information Security Automation	Vulnerability Management at Tinkoff Fintech School	4 Mar 201910:38	–	avleonov
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information	28 Apr 201500:00	–	bdu_fstec
Circl	CVE-2008-0166	15 May 200800:00	–	circl
CVE	CVE-2008-0166	13 May 200817:00	–	cve
Cvelist	CVE-2008-0166	13 May 200817:00	–	cvelist
Debian	[SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator	13 May 200812:06	–	debian

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	7.04	any	libssl0.9.8	0.9.8c-4ubuntu0.3	libssl0.9.8_0.9.8c-4ubuntu0.3_any.deb
Ubuntu	7.10	any	libssl0.9.8	0.9.8e-5ubuntu3.2	libssl0.9.8_0.9.8e-5ubuntu3.2_any.deb
Ubuntu	8.04	any	libssl0.9.8	0.9.8g-4ubuntu3.1	libssl0.9.8_0.9.8g-4ubuntu3.1_any.deb

13 May 2008 13:19Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

CVSS 27.8

EPSS0.04768