PT-2017-9183
CVE-2016-7409
·
Publicado
2016-07-26
·
Atualizado
2017-03-04
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Dropbear SSH versions prior to 2016.74
Description
The issue allows local users to read process memory, related to a failed remote ident. This is possible when the dbclient and server in Dropbear SSH are compiled with DEBUG TRACE and the -v argument is used.
Recommendations
For versions prior to 2016.74, update to version 2016.74 or later to resolve the issue.
As a temporary workaround, consider disabling the DEBUG TRACE compilation option until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾