What’s Vulnerable › Vulnerabilities

CVE-2011-4327

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-02-03 · updated 2026-06-16
• Weakness: CWE-200

Description

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.

Affected products

• OpenSSH: through 5.8; 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.27, 1.3 (+73)

References

• http://www.openssh.com/txt/portable-keysign-rand-helper.adv
• https://bugzilla.redhat.com/show_bug.cgi?id=755640
• http://www.openssh.com/txt/portable-keysign-rand-helper.adv
• https://bugzilla.redhat.com/show_bug.cgi?id=755640

Get alerted when CVE-2011-4327 or the next vulnerability affects your stack