DS
Vendor
Dropbear Ssh Project
20
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-48795 | DS Dropbear Ssh Dropbear Ssh Project | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… |
| CVE-2021-36369 | DS Dropbear Ssh Dropbear Ssh Project | 7.5 | Oct 12 | An issue was discovered in Dropbear through 2020.81 |
| CVE-2020-36254 | DS Dropbear Ssh Dropbear Ssh Project | 8.1 | Feb 25 | scp.c in Dropbear before 2020.79 mishandles the filename of |
| CVE-2019-12953 | DS Dropbear Ssh Dropbear Ssh Project | 5.3 | Dec 30 | Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599 |
| CVE-2017-2659 | DS Dropbear Ssh Dropbear Ssh Project | 7.5 | Mar 20 | It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid |
| CVE-2018-15599 | DS Dropbear Ssh Dropbear Ssh Project | 5.3 | Aug 21 | The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in… |
| CVE-2017-9079 | DS Dropbear Ssh Dropbear Ssh Project | 4.7 | May 19 | Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option |
| CVE-2017-9078 | DS Dropbear Ssh Dropbear Ssh Project | 8.8 | May 19 | The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled |
| CVE-2016-7409 | DS Dropbear Ssh Dropbear Ssh Project | 5.5 | Mar 3 | The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote… |
| CVE-2016-7408 | DS Dropbear Ssh Dropbear Ssh Project | 8.8 | Mar 3 | The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument |
| CVE-2016-7407 | DS Dropbear Ssh Dropbear Ssh Project | 9.8 | Mar 3 | The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file |
| CVE-2016-7406 | DS Dropbear Ssh Dropbear Ssh Project | 9.8 | Mar 3 | Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument |
| CVE-2016-3116 | DS Dropbear Ssh Dropbear Ssh Project | 6.4 | Mar 22 | CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data |
| CVE-2013-4434 | DS Dropbear Ssh Dropbear Ssh Project | – | Oct 25 | Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote… |
| CVE-2013-4421 | DS Dropbear Ssh Dropbear Ssh Project | – | Oct 25 | The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet… |
| CVE-2012-0920 | DS Dropbear Ssh Dropbear Ssh Project | – | Jun 5 | Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to… |
| CVE-2007-1099 | DS Dropbear Ssh Dropbear Ssh Project | – | Feb 26 | dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle… |
| CVE-2006-1206 | DS Dropbear Ssh Dropbear Ssh Project | – | Mar 14 | Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of… |
| CVE-2005-4178 | DS Dropbear Ssh Dropbear Ssh Project | – | Dec 12 | Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an… |
| CVE-2004-2486 | DS Dropbear Ssh Dropbear Ssh Project | – | Dec 31 | The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access |