CVE-2011-0539 Information disclosure in n/a
Remote attackers can obtain sensitive stack memory contents or facilitate hash collisions when generating legacy certificates with uninitialized nonce fields.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-0539?
CVE-2011-0539 is a high-severity vulnerability in OpenSSH, published on 10 Feb 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.
Which versions are affected by CVE-2011-0539?
It affects 1 product.
Products include OpenSSH.
How do I fix CVE-2011-0539?
Apply the vendor's patch.
Is CVE-2011-0539 being exploited?
There is no known exploitation of CVE-2011-0539 in the wild and no public exploit code.
Other vulnerabilities in OpenSSH
Sources
Also known as DEBIAN-CVE-2011-0539, GHSA-395x-3x8q-mv38.