Lucene search
+L

1 matches found

OSV
OSV
added 2017/06/10 7:1 a.m.8 views

MGASA-2017-0165 Updated dropbear packages fix security vulnerability

A double-free in the server could be triggered by an authenticated user if dropbear is running with -a CVE-2017-9078. The default Mageia configuration does not set -a, so is not vulnerable Dropbear parsed authorizedkeys as root, even if it were a symlink. The fix is to switch to user permissions...

8.8CVSS4.9AI score0.05142EPSS
SaveExploits0References3
Rows per page
Query Builder