Every CVESearch/Get API key

CVE-2005-4178

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary...

6.5 MediumFix available

CVE-2005-4178 is a medium vulnerability (CVSS 6.5) in Debian Linux, published December 12, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.44%, the 89th percentile. Fixed in dropbear 0.47-1.

Severity
6.5 MediumCVSS 2.0, NVD
Exploit chance
3.44%EPSS, 89th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.47-1dropbear +3 more

Description

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Exploit likelihood

3.44%Unchanged since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dropbear
Debian:12
before 0.47-1
0.47-1
dropbear
Debian:13
before 0.47-1
0.47-1
dropbear
Debian:14
before 0.47-1
0.47-1
dropbear
Debian:3.1
before 0.45-2sarge0, plus listed versions
0.45-2
0.45-2sarge0

What each source reports

NVD Score used6.5

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Record
CVE-2005-4178
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Record
CVE-2005-4178
Updated
2026-11-02
EUVDEUVD-2005-4173No score

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Record
EUVD-2005-4173
Updated
2026-11-03
GitHub AdvisoriesGHSA-6483-gg6m-x7w8No score

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary...

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Record
GHSA-6483-gg6m-x7w8
Updated
2026-11-02
OSVNo score

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Record
CVE-2005-4178
Updated
2026-11-02
OSVDEBIAN-CVE-2005-4178No score

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Record
DEBIAN-CVE-2005-4178
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 6 moreShow less
MoveEnter Open