CVE-2016-7406

CVE-2016-7406

EPSS 10.5%

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugzilla.redhat.com/show_bug.cgi?id=1376353 http://seclists.org/fulldisclosure/2024/Aug/35 https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcb https://security.gentoo.org/glsa/201702-23 http://www.openwall.com/lists/oss-security/2016/09/15/2 http://www.securityfocus.com/bid/92974