DS
Product
Dropbear Ssh
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 6Low 0
Watch
Add Dropbear Ssh to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9078 | 8.8 | May 19 | The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled Affected: before 2017.75 |
| CVE-2016-7408 | 8.8 | Mar 3 | The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument Affected: through 2016.73 |
| CVE-2020-36254 | 8.1 | Feb 25 | scp.c in Dropbear before 2020.79 mishandles the filename of Affected: before 2020.79 |
| CVE-2021-36369 | 7.5 | Oct 12 | An issue was discovered in Dropbear through 2020.81 Affected: through 2020.81 |
| CVE-2017-2659 | 7.5 | Mar 20 | It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid Affected: before 2013.59 |
Showing 5
