logo

Database

Lack of data validation In dropbear

Description

The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2016-74082. NVD-2016-74083. OSV-DEBIAN-2016-74084. OSV-2016-74085. SECURITY-TRACKER-CVE-2016-7408

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.