Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-4252

Критический

ALT-PU-2024-4252: package dropbear update to version 2022.83-alt2

Источник
errata.altlinux.org
Дата публикации
20.03.2024
Дата обновления
20.03.2024
Устраненные уязвимости
10

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades dropbear to version 2022.83-alt2.

Устраненные уязвимости10

Связанные уязвимости

CVSS3: 9.8
altlinux
больше 4 лет назад

ALT-PU-2022-2113: package `dropbear` update to version 2022.82-alt1

CVSS3: 5.3
ubuntu
около 8 лет назад

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

CVSS3: 5.3
nvd
около 8 лет назад

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.

CVSS3: 5.3
debian
около 8 лет назад

The recv_msg_userauth_request function in svr-auth.c in Dropbear throu ...

CVSS3: 5.3
github
больше 4 лет назад

The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.