[SECURITY] [DLA 634-1] dropbear security update

🗓️ 23 Sep 2016 19:26:38Reported by DebianType

dropbear security update for Debian 7 "Wheezy" addressing potential issues in exit message formatting and overflows when parsing OpenSSH's ASN.1 key format

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	Dropbear SSH < 2016.74.0 Multiple Vulnerabilities	28 Mar 201700:00	–	nessus
Tenable Nessus	Debian DLA-634-1 : dropbear security update	26 Sep 201600:00	–	nessus
Tenable Nessus	Dropbear SSH Server < 2016.72 Multiple Vulnerabilities	22 Sep 201600:00	–	nessus
Tenable Nessus	FreeBSD : dropbear -- multiple vulnerabilities (bc19dcca-7b13-11e6-b99e-589cfc0654e1)	16 Sep 201600:00	–	nessus
Tenable Nessus	GLSA-201702-23 : Dropbear: Multiple vulnerabilities	21 Feb 201700:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-7406	19 Aug 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-7407	19 Aug 202500:00	–	nessus
FreeBSD	dropbear -- multiple vulnerabilities	12 Jul 201600:00	–	freebsd
BDU FSTEC	The vulnerability of the SSH Dropbear session management software lies in insufficient input data validation, allowing an attacker to execute arbitrary code.	14 Dec 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSH Dropbear session management software lies in insufficient input data validation, allowing an attacker to execute arbitrary code.	14 Dec 201700:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	7	amd64	dropbear	2012.55-1.3+deb7u1	dropbear_2012.55-1.3+deb7u1_amd64.deb
Debian	7	armel	dropbear	2012.55-1.3+deb7u1	dropbear_2012.55-1.3+deb7u1_armel.deb
Debian	7	armhf	dropbear	2012.55-1.3+deb7u1	dropbear_2012.55-1.3+deb7u1_armhf.deb
Debian	7	i386	dropbear	2012.55-1.3+deb7u1	dropbear_2012.55-1.3+deb7u1_i386.deb

23 Sep 2016 19:26Current

9.6High risk

Vulners AI Score9.6

CVSS 39.8

CVSS 210

EPSS0.10494