CVE-2016-7409

MEDIUM

Dropbear SSH < 2016.73 - Exposure of Sensitive Information via Debug Trace Argument

Title source: llm

Description

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident.

References (5)

Core 5

Core References

Patch, Third Party Advisory, VDB Entry vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201702-23

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04

Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2016/09/15/2

Issue Tracking x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1376353

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/92973

Scores

CVSS v3 5.5

EPSS 0.0045

EPSS Percentile 36.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (1)

dropbear_ssh_project/dropbear_ssh < 2016.73

Published Mar 03, 2017

Tracked Since Feb 18, 2026