PT-2017-9183
CVE-2016-7409
·
تاريخ النشر
2016-07-26
·
تاريخ التحديث
2017-03-04
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Dropbear SSH versions prior to 2016.74
Description
The issue allows local users to read process memory, related to a failed remote ident. This is possible when the dbclient and server in Dropbear SSH are compiled with DEBUG TRACE and the -v argument is used.
Recommendations
For versions prior to 2016.74, update to version 2016.74 or later to resolve the issue.
As a temporary workaround, consider disabling the DEBUG TRACE compilation option until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾