CVE-2016-7406

CVE-2016-7406

EPSS 10.5%

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.redhat.com/show_bug.cgi?id=1376353 http://seclists.org/fulldisclosure/2024/Aug/35 https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcb https://security.gentoo.org/glsa/201702-23 http://www.openwall.com/lists/oss-security/2016/09/15/2 http://www.securityfocus.com/bid/92974