logo

Database

Lack of data validation In dropbear

Description

The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2016-74072. NVD-2016-74073. OSV-DEBIAN-2016-74074. OSV-2016-74075. SECURITY-TRACKER-CVE-2016-7407

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.