CVE-2025-47203

🗓️ 07 May 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 106 Views

Dropbear SSH allows command injection via untrusted hostname in dbclient before version 2025.88.

Reporter	Title	Published	Views	Family All 28
AlpineLinux	CVE-2025-47203	7 May 202500:00	–	alpinelinux
ArchLinux	[ASA-202505-9] dropbear: arbitrary command execution	19 May 202500:00	–	archlinux
Circl	CVE-2025-47203	7 May 202521:31	–	circl
CNNVD	dropbear 安全漏洞	7 May 202500:00	–	cnnvd
Cvelist	CVE-2025-47203	7 May 202500:00	–	cvelist
Debian	[SECURITY] [DLA 4169-1] dropbear security update	17 May 202520:28	–	debian
Debian CVE	CVE-2025-47203	7 May 202500:00	–	debiancve
Tenable Nessus	Debian dla-4169 : dropbear - security update	17 May 202500:00	–	nessus
Tenable Nessus	Fedora 41 : dropbear (2025-23ccf778c9)	31 May 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-47203	19 Aug 202500:00	–	nessus

Vulners

CNA

Node

dropbear_ssh_project dropbear_sshRange0–2025.88

[
  {
    "defaultStatus": "unaffected",
    "product": "Dropbear SSH",
    "vendor": "Dropbear SSH Project",
    "versions": [
      {
        "lessThan": "2025.88",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/mkj/dropbear/blob/master/src/cli-main.c
github	www.github.com/mkj/dropbear/blob/master/CHANGES
lists	www.lists.debian.org/debian-lts-announce/2025/05/msg00020.html
openwall	www.openwall.com/lists/oss-security/2025/05/09/4
openwall	www.openwall.com/lists/oss-security/2025/05/13/3
openwall	www.openwall.com/lists/oss-security/2025/05/13/10
openwall	www.openwall.com/lists/oss-security/2025/05/13/1
openwall	www.openwall.com/lists/oss-security/2025/05/12/6

15 Apr 2026 00:35Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.5

EPSS0.00195

SSVC

CWE-78