Fluid Attacks Database

Description

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	dropbear	>=0 <2019.78-1	2019.78-1
debian 13	dropbear	>=0 <2019.78-1	2019.78-1
debian 12	dropbear	>=0 <2019.78-1	2019.78-1
debian 11	dropbear	>=0 <2019.78-1	2019.78-1

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.