https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:03:48 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-242 certa-2011-avi-242 https://cve.radiocsirt.org/vuln/certa-2011-avi-242 https://cve.radiocsirt.org/vuln/euvd-2026-323025 EUVD-2026-323025 https://cve.radiocsirt.org/vuln/euvd-2026-323025 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0539 <p>The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.</p> <p>The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-0539 https://cve.radiocsirt.org/vuln/ghsa-395x-3x8q-mv38 <p>The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.</p> <p>The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-395x-3x8q-mv38 https://cve.radiocsirt.org/vuln/gsd-2011-0539 gsd-2011-0539 https://cve.radiocsirt.org/vuln/gsd-2011-0539