dropbear:fuzzer-postauth_nomaths: Index-out-of-bounds in wrapfd_new_dummy

Project: https://secure.ucc.asn.au/hg/dropbear Detailed Report: https://oss-fuzz.com/testcase?key=5970010268893184 Project: dropbear Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-postauthnomaths Job Type: libfuzzerubsandropbear Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

DEBIAN-CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

Design/Logic Flaw

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

UBUNTU-CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

CVE-2019-12953

The CVE-2019-12953 entry concerns Dropbear SSH prior to patched releases (2011.54–2018.76) and describes an information-disclosure via an inconsistent failure delay that may reveal valid usernames, a separate issue from CVE-2018-15599. Connected sources confirm affected software is Dropbear and i...

PT-2020-9351 · Dropbear +1 · Dropbear +1

Name of the Vulnerable Software and Affected Versions: Dropbear versions 2011.54 through 2018.76 Description: The issue is related to an inconsistent failure delay that may lead to revealing valid usernames. Recommendations: For versions 2011.54 through 2018.76, update to a version that addresses...

Perth Dropbear Information Disclosure Vulnerability

Perth Dropbear is a lightweight SSH server/client software from the University of Perth, Australia that is primarily used in embedded devices. A security vulnerability exists in Dropbear versions 2011.54 through 2018.76 that stems from an inconsistent failure delay time, which could result in the...

CVE-2019-12953: Observable Discrepancy

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

Remote Code Execution (RCE)

Dropbear is vulnerable to remote code execution. The vulnerability existed because of a double free in cleanup of TCP listeners when the -a option is enabled...

Information Disclosure

Dropbear is vulnerable to information disclosure. Local users can read certain files as root, if the file has the authorizedkeys file format with a command= option. This occurs as /.ssh/authorizedkeys is read with root privileges and symlinks are followed...

dropbear:fuzzer-postauth_nomaths: Heap-use-after-free in recv_msg_channel_open

Project: https://secure.ucc.asn.au/hg/dropbear Detailed Report: https://oss-fuzz.com/testcase?key=6589714903728128 Project: dropbear Fuzzing Engine: honggfuzz Fuzz Target: fuzzer-postauthnomaths Job Type: honggfuzzasandropbear Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash...

dropbear:fuzzer-client_mutator: Use-of-uninitialized-value in fuzz_get_packets

Detailed Report: https://oss-fuzz.com/testcase?key=6331446865952768 Project: dropbear Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-clientmutator Job Type: libfuzzermsandropbear Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fuzzgetpackets...

GLSA-202007-53 : Dropbear: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-53 Dropbear: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

Dropbear: Multiple vulnerabilities

Background Dropbear is an SSH server and client designed with a small memory footprint. Description Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaroun...

CVE-2013-3619

Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before SMTX9317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the 1 Lighttpd web server SSL interface and the 2 Dropbear S...