PT-2014-2168 · Openssh+1 · Openssh+1

CVE-2011-4327 · Publicado 2014-02-03 · Atualizado 2026-05-29

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 5.8p2

Description The issue allows local users to obtain sensitive key information via the ptrace system call due to unintended open file descriptors when executing ssh-rand-helper in ssh-keysign.c.

Recommendations For versions prior to 5.8p2, update to version 5.8p2 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2024-3921

ALT-PU-2024-4077

ALT-PU-2024-4467

ALT-PU-2024-9513

CVE-2011-4327

Produtos afetados

Alt Linux

Openssh

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-4327 · Nota de Segurança
• http://openssh.com/txt/portable-keysign-rand-helper.adv · Aviso do Fabricante
• https://t.me/cveNotify/165276 · Publicação no Telegram
• https://bugzilla.redhat.com/show_bug.cgi?id=755640 · Nota