Описание
The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2017.74-3build1 |
| cosmic | not-affected | 2017.75-3build1 |
| devel | not-affected | 2017.75-3build1 |
| disco | not-affected | 2017.75-3build1 |
| eoan | not-affected | 2017.75-3build1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 2017.74-3build1 |
| esm-apps/focal | not-affected | 2017.75-3build1 |
| esm-apps/jammy | not-affected | 2017.75-3build1 |
Показывать по
EPSS
8.5 High
CVSS2
8.8 High
CVSS3
Связанные уязвимости
The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.
The server in Dropbear before 2017.75 might allow post-authentication ...
The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.
Уязвимость компонента TCP Listener пакета программ для организации сеансов связи по протоколу SSH Dropbear, позволяющая нарушителю выполнить произвольный код
EPSS
8.5 High
CVSS2
8.8 High
CVSS3