CVE-2016-7407

Description

References

• openwall.com/lists/oss-security/2016/09/15/2 · Mailing List
• securityfocus.com/bid/92972 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• secure.ucc.asn.au/hg/dropbear/rev/34e6127ef02e · Issue Tracking
• security.gentoo.org/glsa/201702-23 · Patch

dropbear ssh 的其他漏洞

• CVE-2023-48795中危 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…
• CVE-2021-36369高危 7.5An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-…
• CVE-2020-36254高危 8.1scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.
• CVE-2019-12953中危 5.3Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-20…
• CVE-2017-2659高危 7.5It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is …