CVE-2016-7406 Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
CriticalCVSS 9.8
EPSS 10.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dropbear(Debian:12) | < 2016.74-1 | 2016.74-1 |
| debian/dropbear(Debian:13) | < 2016.74-1 | 2016.74-1 |
| debian/dropbear(Debian:14) | < 2016.74-1 | 2016.74-1 |
| dropbear ssh project dropbear ssh | <= 2016.73 | No fix listed |
References
- Debian Security Tracker CVE-2016-7406 vendor-advisory
- [oss-security] 20160915 Re: CVE request for Dropbear SSH <2016.74 mailing-list patch third-party-advisory
- 92974 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking
- secure.ucc.asn.au issue-tracking patch third-party-advisory
- GLSA-201702-23 patch third-party-advisory vdb-entry vendor-advisory
- seclists.org