Updated dropbear packages fix security vulnerability

🗓️ 16 Sep 2016 09:27:13Reported by Gentoo FoundationType

Updated dropbear packages fix security vulnerability. Fix for format string injection vulnerability, arbitrary code execution issue, and OpenSSH key import vulnerability

Reporter	Title	Published	Views	Family All 53
Tenable Nessus	Dropbear SSH < 2016.74.0 Multiple Vulnerabilities	28 Mar 201700:00	–	nessus
Tenable Nessus	Debian DLA-634-1 : dropbear security update	26 Sep 201600:00	–	nessus
Tenable Nessus	Dropbear SSH Server < 2016.72 Multiple Vulnerabilities	22 Sep 201600:00	–	nessus
Tenable Nessus	FreeBSD : dropbear -- multiple vulnerabilities (bc19dcca-7b13-11e6-b99e-589cfc0654e1)	16 Sep 201600:00	–	nessus
Tenable Nessus	GLSA-201702-23 : Dropbear: Multiple vulnerabilities	21 Feb 201700:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-7406	19 Aug 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-7407	19 Aug 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-7408	19 Aug 202500:00	–	nessus
FreeBSD	dropbear -- multiple vulnerabilities	12 Jul 201600:00	–	freebsd
BDU FSTEC	The vulnerability of the SSH Dropbear session management software lies in insufficient input data validation, allowing an attacker to execute arbitrary code.	14 Dec 201700:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	5	any	dropbear	2014.66-1.2	dropbear-2014.66-1.2.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2016/09/15/2
secure	www.secure.ucc.asn.au/hg/dropbear/rev/10f28c95ca31

16 Sep 2016 09:27Current

1Low risk

Vulners AI Score1

CVSS 39.8

CVSS 210

EPSS0.10494