Fluid Attacks Database

Description

The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	dropbear	>=0 <0.43-2	0.43-2
debian 11	dropbear	>=0 <0.43-2	0.43-2
debian 13	dropbear	>=0 <0.43-2	0.43-2
debian 14	dropbear	>=0 <0.43-2	0.43-2

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.