CVE-2005-4178

published 2005-12-12

CVE-2005-4178: Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be…

Priority P4 27 medium 6.5 CVSS 2.0

AV N AC L Au S C P I P A P

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	debian_linux	—	—
debian	dropbear	< dropbear 0.47-1 (bookworm)	dropbear 0.47-1 (bookworm)
dropbear_ssh_project	dropbear_ssh	< 0.47	0.47
dropbear_ssh_project	dropbear_ssh	>= 0 < 0.47-1	0.47-1
dropbear_ssh_project	dropbear_ssh	>= 0 < 0.47-1	0.47-1
dropbear_ssh_project	dropbear_ssh	>= 0 < 0.47-1	0.47-1
dropbear_ssh_project	dropbear_ssh	>= 0 < 0.47-1	0.47-1

CVSS provenance

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

osv 6.5 MEDIUM

vendor_debian 6.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.