CVE-2011-0539
- State
- Published
- Severity
- 7.5 High
- Published
- Feb 10, 2011
- Updated
- May 29, 2026
- Reserved
- Jan 20, 2011
Description
The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-457 Use of Uninitialized Variable
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20110204 Re: [vendor-sec] OpenSSH security advisory: legacy certificate signing in 5.6/5.7mailing-list
- 1025028vdb-entry
- 46155vdb-entry
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
- ADV-2011-0284vdb-entry
- 43181third-party-advisory
- HPSBMA02658vendor-advisory
- 44269third-party-advisory
- http://www.openssh.com/txt/legacy-cert.adv
- openssh-certificate-info-disclosure(65163)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.