CVE-2011-0766: The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the...

Security readout for executives and security teams

This flaw affects old Erlang/OTP SSH components that used predictable random seeds based on time. If present, it could weaken SSH trust because attackers may be able to guess DSA host or session keys. The bundle does not provide CVSS, confirmed exploitation, or a complete vendor advisory. Exposure is likely limited to legacy Erlang/OTP deployments using the built-in ssh library before R14B03, especially systems still running old Crypto or SSH application versions. Modern deployments are less likely affected, but inventories should confirm version lineage. Prioritize this where legacy Erlang/OTP systems provide SSH access or support sensitive administrative paths. For most modern environments, urgency depends on whether affected-era components remain deployed. Mitigation focus: Upgrade Erlang/OTP ssh library to R14B03 or later.; Ensure Crypto is at least 2.0.2.2 and SSH is at least 2.0.5.; Check current vendor guidance for any additional key-rotation recommendations..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.