tocsin

Debian/dropbear: high 8.8

The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.

Action: Upgrade dropbear to 2016.74-1 or later.

Affected

introducedfixedlast affected
02016.74-1-

Fixed versions

2016.74-1

Sources

published · modified · JSON