Dropbear Ssh Project vulnerabilities

Products

• Ssh 20

Newest

• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• dropbear ssh project ssh, debian linux +1 more An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the... CVE-2021-36369 Fix available 7.5 HighOctober 12, 2022
• dropbear ssh project ssh scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related... CVE-2020-36254 Fix available 8.1 HighFebruary 25, 2021
• dropbear ssh project ssh Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing... CVE-2019-12953 Fix available 5.3 MediumDecember 30, 2020
• [unknown] dropbear, dropbear ssh project ssh +1 more It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is... CVE-2017-2659 Fix available 5.3 MediumMarch 20, 2019
• dropbear ssh project ssh, debian linux +1 more The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a... CVE-2018-15599 Fix available 5.3 MediumAugust 21, 2018
• dropbear ssh project ssh, debian linux +1 more Dropbear before 2017.75 might allow local users to read certain files as root, if the file has... CVE-2017-9079 Fix available 4.7 MediumMay 19, 2017
• debian linux, dropbear ssh project ssh, netapp h410c firmware +2 more The server in Dropbear before 2017.75 might allow post-authentication root remote code execution... CVE-2017-9078 Fix available 8.8 HighMay 19, 2017
• dropbear ssh project ssh The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows... CVE-2016-7409 Fix available 5.5 MediumMarch 3, 2017
• dropbear ssh project ssh The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via... CVE-2016-7408 Fix available 8.8 HighSeptember 16, 2016
• dropbear ssh project ssh The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary... CVE-2016-7407 Fix available 9.8 CriticalSeptember 16, 2016
• dropbear ssh project ssh Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute... CVE-2016-7406 Fix available EPSS 10.2% 9.8 CriticalSeptember 16, 2016
• dropbear ssh project ssh CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to... CVE-2016-3116 Public exploitFix available EPSS 19.8% 6.4 MediumMarch 16, 2016
• dropbear ssh project ssh Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with... CVE-2013-4434 Public exploitFix available 5.0 MediumOctober 25, 2013
• dropbear ssh project ssh The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote... CVE-2013-4421 Fix available 5.0 MediumOctober 25, 2013
• dropbear ssh project ssh, debian linux +1 more Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command... CVE-2012-0920 Fix available 7.1 HighApril 23, 2012
• dropbear ssh project ssh dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a... CVE-2007-1099 Fix available 7.5 HighFebruary 26, 2007
• dropbear ssh project ssh Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on... CVE-2006-1206 Public exploitFix available EPSS 11.7% 5.0 MediumMarch 14, 2006
• debian linux, dropbear ssh project ssh +1 more Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary... CVE-2005-4178 Fix available 6.5 MediumDecember 12, 2005
• dropbear ssh project ssh The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which... CVE-2004-2486 Fix available 7.5 HighDecember 31, 2004