Multiple vulnerabilities have been found in Dropbear, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dropbear | * | < 2020.80 | >= 2020.80 |
Dropbear is an SSH server and client designed with a small memory footprint.
Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Dropbear users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dropbear-2020.80"
Multiple vulnerabilities have been found in Dropbear, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dropbear | * | < 2016.74 | >= 2016.74 |
Dropbear is an SSH server and client designed with a small memory footprint.
Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with root privileges if usernames containing special characters can be created on a system. Also, a dbclient user who can control username or host arguments could potentially run arbitrary code with the privileges of the process.
In addition, a remote attacker could entice a user to process a specially crafted SSH key using dropbearconvert, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All Dropbear users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dropbear-2016.74"
A vulnerability has been found in Dropbear, which allows remote authenticated users to bypass intended shell-command restrictions.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dropbear | * | < 2016.73 | >= 2016.73 |
Dropbear is a relatively small SSH server and client.
A CRLF injection vulnerability in Dropbear SSH allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.
A remote authenticated user could execute arbitrary code with the privileges of the process.
There is no known workaround at this time.
All Dropbear users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dropbear-2016.73"
Multiple vulnerabilities have been found in Dropbear, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dropbear | * | < 2012.55 | >= 2012.55 |
Dropbear is an SSH server and client designed with a small memory footprint.
Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifier and Gentoo bug referenced below for details.
A remote attacker could send a specially crafted request to trigger a use-after-free condition, possibly resulting in arbitrary code execution or a Denial of Service condition. Additionally, the bundled version of libtommath has an error in its prime number generation, which could result in the generation of weak keys.
There is no known workaround at this time.
All Dropbear users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dropbear-2012.55"
A flaw in OpenSSH and Dropbear allows local users to elevate their privileges via scp.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dropbear | * | < 0.47-r1 | >= 0.47-r1 |
| net-misc/openssh | * | < 4.2_p1-r1 | >= 4.2_p1-r1 |
OpenSSH is a free application suite consisting of server and clients that replace tools like telnet, rlogin, rcp and ftp with more secure versions offering additional functionality. Dropbear is an SSH server and client designed with a small memory footprint that includes OpenSSH scp code.
To copy from a local filesystem to another local filesystem, scp constructs a command line using 'cp' which is then executed via system(). Josh Bressers discovered that special characters are not escaped by scp, but are simply passed to the shell.
By tricking other users or applications to use scp on maliciously crafted filenames, a local attacker user can execute arbitrary commands with the rights of the user running scp.
There is no known workaround at this time.
All OpenSSH users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/openssh-4.2_p1-r1"
All Dropbear users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dropbear-0.47-r1"
A buffer overflow in Dropbear could allow authenticated users to execute arbitrary code as the root user.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/dropbear | * | < 0.47 | >= 0.47 |
Dropbear is an SSH server and client with a small memory footprint.
Under certain conditions Dropbear could fail to allocate a sufficient amount of memory, possibly resulting in a buffer overflow.
By sending specially crafted data to the server, authenticated users could exploit this vulnerability to execute arbitrary code with the permissions of the SSH server user, which is the root user by default.
There is no known workaround at this time.
All Dropbear users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/dropbear-0.47"