Описание
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 2016.74-1 |
| bionic | not-affected | 2016.74-1 |
| cosmic | not-affected | 2016.74-1 |
| devel | not-affected | 2016.74-1 |
| disco | not-affected | 2016.74-1 |
| eoan | not-affected | 2016.74-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 2016.74-1 |
| esm-apps/focal | not-affected | 2016.74-1 |
| esm-apps/jammy | not-affected | 2016.74-1 |
Показывать по
EPSS
10 Critical
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Format string vulnerability in Dropbear SSH before 2016.74 allows remo ...
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Уязвимость пакета программ для организации сеансов связи по протоколу SSH Dropbear, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код
EPSS
10 Critical
CVSS2
9.8 Critical
CVSS3