CVE-2011-0539

CVE-2011-0539

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.

CVSS 7.5 · High · EPSS 1.8% · Fix available

Published

2011-02-10T17:00:00.000Z

Updated

2026-05-29T20:34:45.288Z

Stack: system · network

Check your server →