CVE-2008-0166

7.5 HIGH
Published: May 13, 2008 Modified: April 23, 2026
View on NVD

Description

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://metasploit.com/users/hdm/tools/debian-openssl/
Source: cve@mitre.org
Broken Link
http://secunia.com/advisories/30136
Source: cve@mitre.org
Broken Link Vendor Advisory
http://secunia.com/advisories/30220
Source: cve@mitre.org
Broken Link Vendor Advisory
http://secunia.com/advisories/30221
Source: cve@mitre.org
Broken Link Vendor Advisory
http://secunia.com/advisories/30231
Source: cve@mitre.org
Broken Link Vendor Advisory
http://secunia.com/advisories/30239
Source: cve@mitre.org
Broken Link Vendor Advisory
http://secunia.com/advisories/30249
Source: cve@mitre.org
Broken Link Vendor Advisory
http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel
Source: cve@mitre.org
Third Party Advisory
http://www.debian.org/security/2008/dsa-1571
Source: cve@mitre.org
Mailing List Patch Vendor Advisory
http://www.debian.org/security/2008/dsa-1576
Source: cve@mitre.org
Mailing List Patch
http://www.kb.cert.org/vuls/id/925211
Source: cve@mitre.org
Third Party Advisory US Government Resource
http://www.securityfocus.com/archive/1/492112/100/0/threaded
Source: cve@mitre.org
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/29179
Source: cve@mitre.org
Broken Link Exploit Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1020017
Source: cve@mitre.org
Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-612-1
Source: cve@mitre.org
Patch Third Party Advisory
http://www.ubuntu.com/usn/usn-612-2
Source: cve@mitre.org
Patch Third Party Advisory
http://www.ubuntu.com/usn/usn-612-3
Source: cve@mitre.org
Third Party Advisory
http://www.ubuntu.com/usn/usn-612-4
Source: cve@mitre.org
Third Party Advisory
http://www.ubuntu.com/usn/usn-612-7
Source: cve@mitre.org
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-137A.html
Source: cve@mitre.org
Broken Link Third Party Advisory US Government Resource
https://16years.secvuln.info
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/42375
Source: cve@mitre.org
Third Party Advisory VDB Entry
https://news.ycombinator.com/item?id=40333169
Source: cve@mitre.org
https://www.exploit-db.com/exploits/5622
Source: cve@mitre.org
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/5632
Source: cve@mitre.org
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/5720
Source: cve@mitre.org
Exploit Third Party Advisory VDB Entry
http://metasploit.com/users/hdm/tools/debian-openssl/
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://secunia.com/advisories/30136
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Vendor Advisory
http://secunia.com/advisories/30220
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Vendor Advisory
http://secunia.com/advisories/30221
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Vendor Advisory
http://secunia.com/advisories/30231
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Vendor Advisory
http://secunia.com/advisories/30239
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Vendor Advisory
http://secunia.com/advisories/30249
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Vendor Advisory
http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.debian.org/security/2008/dsa-1571
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List Patch Vendor Advisory
http://www.debian.org/security/2008/dsa-1576
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List Patch
http://www.kb.cert.org/vuls/id/925211
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory US Government Resource
http://www.securityfocus.com/archive/1/492112/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/29179
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Exploit Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1020017
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-612-1
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Third Party Advisory
http://www.ubuntu.com/usn/usn-612-2
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Third Party Advisory
http://www.ubuntu.com/usn/usn-612-3
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.ubuntu.com/usn/usn-612-4
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.ubuntu.com/usn/usn-612-7
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-137A.html
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Third Party Advisory US Government Resource
https://16years.secvuln.info
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/42375
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
https://news.ycombinator.com/item?id=40333169
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/5622
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/5632
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/5720
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Third Party Advisory VDB Entry

52 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.5 / 10.0
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-338

Affected Vendors

canonical debian openssl

Related CVEs

CVE-2026-41279 N/A
CVE-2026-41278 N/A
CVE-2026-41277 N/A
CVE-2026-41276 N/A
CVE-2026-41275 N/A