logo

Database

Lack of data validation In dropbear

Description

CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2016-31162. NVD-2016-31163. OSV-DEBIAN-2016-31164. OSV-2016-31165. SECURITY-TRACKER-CVE-2016-3116

References

1. https://github.com/mxypoo/CVE-2016-3116-DropbearSSH

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.