CVE-2025-47203

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname...

4.5 MediumFix available

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.59%Up 0.2 points since May 8, 2025

What each source reports

CVE List Score used 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: CVE-2025-47203
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-78
Updated: 2026-11-02

EUVDEUVD-2025-13914 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: EUVD-2025-13914
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-f2w6-r722-5fr8 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname...

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: GHSA-f2w6-r722-5fr8
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-78
Updated: 2026-11-02

NVD 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: CVE-2025-47203
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-78
Updated: 2026-11-02

OSVALPINE-CVE-2025-47203 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: ALPINE-CVE-2025-47203
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSV 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: CVE-2025-47203
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-78
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-47203 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: DEBIAN-CVE-2025-47203
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-47203 4.5

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: UBUNTU-CVE-2025-47203
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVMGASA-2025-0158 No score

Updated dropbear packages fix security vulnerability

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.

Record: MGASA-2025-0158
Updated: 2026-11-02

Affected products

dropbear ssh project ssh

Affected packages

Affected packages
Package	Affected	Fixed
`dropbear` Alpine:v3.24	before 2025.88-r0	2025.88-r0
`dropbear` Debian:12	before 2022.83-1+deb12u3, plus listed versions 2022.83-12022.83-1+deb12u12022.83-1+deb12u1~bpo11+12022.83-1+deb12u2	2022.83-1+deb12u3
`dropbear` Debian:13	before 2025.88-1	2025.88-1
`dropbear` Debian:14	before 2025.88-1	2025.88-1
`dropbear` Debian:11	before 2020.81-3+deb11u3, plus listed versions 2020.81-32020.81-3+deb11u12020.81-3+deb11u2	2020.81-3+deb11u3
`dropbear` Mageia:9	before 2022.83-2.2.mga9	2022.83-2.2.mga9
`dropbear` Ubuntu:16.04:LTS	All versions, plus listed versions 2014.65-1ubuntu22015.68-12015.70-12015.71-12016.72-1	None known
`dropbear` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2017.75-22017.75-3build12017.75-3ubuntu0.1~esm1	None known
`dropbear` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 2019.78-2build12019.78-2ubuntu0.1~esm1	None known
`dropbear` Ubuntu:22.04:LTS	All versions, plus listed versions 2020.81-32020.81-42020.81-52020.81-5ubuntu0.1	None known
`dropbear` Ubuntu:24.04:LTS	All versions, plus listed versions 2022.83-22022.83-32022.83-4	None known
`dropbear` Ubuntu:25.10	All versions, plus listed versions 2024.86-22025.88-2	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-47203 is a medium vulnerability (CVSS 4.5) in Dropbear Ssh Project Ssh, published May 7, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in dropbear 2025.88-r0.

References

Show 12 moreShow less