dropbear vulnerabilities (Debian)
24 vulnerabilities.
-
dropbearDebian mkj Dropbear S Range Check curve25519.c unpackneg signature verification 6.3 Medium -
dropbearDebian Dropbear: privilege escalation via unix domain socket forwardings 5.4 Medium -
dropbearDebian dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname... 4.5 Medium -
dropbearDebian Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
dropbearDebian An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the... 7.5 High -
dropbearDebian scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related... 8.1 High -
dropbearDebian Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing... 5.3 Medium -
dropbearDebian It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is... 5.3 Medium -
dropbearDebian The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a... 5.3 Medium -
dropbearDebian Dropbear before 2017.75 might allow local users to read certain files as root, if the file has... 4.7 Medium -
dropbearDebian The server in Dropbear before 2017.75 might allow post-authentication root remote code execution... 8.8 High -
dropbearDebian The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows... 5.5 Medium -
dropbearDebian The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via... 8.8 High -
dropbearDebian The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary... 9.8 Critical -
dropbearDebian Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute... 9.8 Critical -
dropbearDebian CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to... 6.4 Medium -
dropbearDebian Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with... 5.0 Medium -
dropbearDebian The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote... 5.0 Medium -
dropbearDebian Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command... 7.1 High -
dropbearDebian dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a... 7.5 High -
dropbearDebian Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on... 5.0 Medium -
dropbearDebian scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain... 4.6 Medium -
dropbearDebian Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary... 6.5 Medium -
dropbearDebian The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which... 7.5 High