CVE-2016-7409

Name of the Vulnerable Software and Affected Versions Dropbear SSH versions prior to 2016.74

Description The issue allows local users to read process memory, related to a failed remote ident. This is possible when the dbclient and server in Dropbear SSH are compiled with DEBUG TRACE and the -v argument is used.

Recommendations For versions prior to 2016.74, update to version 2016.74 or later to resolve the issue. As a temporary workaround, consider disabling the DEBUG TRACE compilation option until a patch is available.