Alpine/dropbear: high 8.8
The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.
Action: Upgrade dropbear to 2017.75-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2017.75-r0 | - |
Fixed versions
| 2017.75-r0 |
Sources
published · modified · JSON