CVE-2016-7409
published 2017-03-03CVE-2016-7409: The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related…
PriorityP422medium5.5CVSS 3.0
AVLACLPRLUINSUCHINAN
EPSS
0.45%
36.0th percentile
The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | dropbear | < dropbear 2016.74-1 (bookworm) | dropbear 2016.74-1 (bookworm) |
| dropbear_ssh_project | dropbear_ssh | <= 2016.73 | — |
| dropbear_ssh_project | dropbear_ssh | >= 0 < 2016.74-1 | 2016.74-1 |
| dropbear_ssh_project | dropbear_ssh | >= 0 < 2016.74-1 | 2016.74-1 |
| dropbear_ssh_project | dropbear_ssh | >= 0 < 2016.74-1 | 2016.74-1 |
| dropbear_ssh_project | dropbear_ssh | >= 0 < 2016.74-1 | 2016.74-1 |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv5.5MEDIUM
vendor_debian5.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2016-7409: dropbear - The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG...
vendor_debian·2016·CVSS 5.5
CVE-2016-7409 [MEDIUM] CVE-2016-7409: dropbear - The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG...
The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident.
Scope: local
bookworm: resolved (fixed in 2016.74-1)
bullseye: resolved (fixed in 2016.74-1)
forky: resolved (fixed in 2016.74-1)
sid: resolved (fixed in 2016.74-1)
trixie: resolved (fixed in 2016.74-1)
GHSA
GHSA-vqwq-p49h-3hx4: The dbclient and server in Dropbear SSH before 2016
ghsa_unreviewed·2022-05-17
CVE-2016-7409 [MEDIUM] CWE-200 GHSA-vqwq-p49h-3hx4: The dbclient and server in Dropbear SSH before 2016
The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident.
OSV
CVE-2016-7409: The dbclient and server in Dropbear SSH before 2016
osv·2017-03-03·CVSS 5.5
CVE-2016-7409 [MEDIUM] CVE-2016-7409: The dbclient and server in Dropbear SSH before 2016
The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident.
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2016/09/15/2http://www.securityfocus.com/bid/92973https://bugzilla.redhat.com/show_bug.cgi?id=1376353https://secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04https://security.gentoo.org/glsa/201702-23http://www.openwall.com/lists/oss-security/2016/09/15/2http://www.securityfocus.com/bid/92973https://bugzilla.redhat.com/show_bug.cgi?id=1376353https://secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04https://security.gentoo.org/glsa/201702-23
2017-03-03
Published