SUSE CVE-2013-4421

The bufdecompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service memory consumption via a compressed packet that has a large size when it is decompressed...

SUSE CVE-2016-7408

The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted 1 -m or 2 -c argument...

Improper Access Cotrol

dropbear is vulnerable to improper access control. The vulnerability exists due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code which allows an attacker to abuse a forwarded agent for logging on to another server...

CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

PT-2022-10511 · Dropbear +3 · Dropbear +3

Name of the Vulnerable Software and Affected Versions: Dropbear versions through 2020.81 Description: An issue in the client-side SSH code allows an SSH server to change the login process in its favor due to a non-RFC-compliant check of available authentication methods. This can bypass additional...

Vulnerabilities in SICK MARSIC300

SICK received a report about multiple security vulnerabilities in the SICK MARSIC300 device. The security vulnerabilities are caused by the third-party library Dropbear, which is used by the SICK MARSIC300 to provide SSH communication. A successful exploitation of these vulnerabilities could lead...

PT-2021-9837 · Mofi Network +1 · Mofi4500-4Gxelte +1

Name of the Vulnerable Software and Affected Versions: Mofi Network MOFI4500-4GXeLTE version 4.1.5-std Description: An issue was discovered where the Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom...

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

Dropbear Double Release Vulnerability

Dropbear is an open source small SSH server and client developed by software developer Matt Johnston , it can run on a variety of platforms based on POSIX Portable Operating System Interface . A double release vulnerability exists in the server in versions of Dropbear prior to 2017.75. A remote...

DEBIAN-CVE-2017-9078

The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dropbear package up to version 0.47 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dropbear package up to version 2012.55 of the Gentoo Linux operating system can be exploited by a malicious individual. Exploitation of this vulnerability can occur remotely. Such individuals have gone through the authentication process...