Lucene search
K

13 matches found

OSV
OSV
added 2026/02/12 10:16 p.m.4 views

ALPINE-CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.5AI score0.00364EPSS
Exploits0References1
OSV
OSV
added 2026/02/12 10:16 p.m.10 views

CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.8AI score0.00364EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2026/02/12 10:16 p.m.0 views

CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.9AI score0.00364EPSS
Exploits0References4
OSV
OSV
added 2026/02/12 10:16 p.m.3 views

UBUNTU-CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.8AI score0.00364EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/12 9:37 p.m.23 views

CVE-2025-14282 Dropbear: privilege escalation via unix domain socket forwardings

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS0.00364EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/12 9:37 p.m.4 views

CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.5AI score0.00364EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/12 9:37 p.m.4 views

CVE-2025-14282 Dropbear: privilege escalation via unix domain socket forwardings

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.4AI score0.00364EPSS
Exploits0References5
CVE
CVE
added 2026/02/12 9:37 p.m.185 views

CVE-2025-14282

Affected software. Dropbear SSH server. In multi-user mode, the server forwards sockets requested by the remote client as root, and only switches to the logged-in user upon spawning a shell or performing user-file operations. The ability to use unix domain sockets as forwarding destinations allow...

5.4CVSS5.4AI score0.00364EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2026/02/12 9:37 p.m.5 views

CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.5AI score0.00364EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/02/12 9:37 p.m.2 views

CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

5.4CVSS5.4AI score0.00364EPSS
Exploits0
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.6 views

dropbear 安全漏洞

Dropbear is an application developed by Matt Johnston personally. Dropbear has a security vulnerability. This vulnerability stems from the fact that, in multi-user mode, the Dropbear SSH server executes socket forwarding requests from remote clients as root accounts. This allows users who can log...

5.4CVSS5.8AI score0.00364EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/01/06 3:34 a.m.8 views

CVE-2025-14282

A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some operations like reading the user's file...

6AI score0.00364EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.3 views

PT-2025-51833

Name of the Vulnerable Software and Affected Versions Dropbear versions 2024.84 through 2025.88 Description An authenticated user can achieve privilege escalation in Dropbear via Unix domain socket forwardings. Specifically, a user able to log in via SSH can connect to any Unix socket as root,...

5.4CVSS5.3AI score0.00364EPSS
Exploits0References18
Rows per page
Query Builder