Vulnerabilities > CVE-2019-12953 - Information Exposure Through Discrepancy vulnerability in Dropbear SSH Project Dropbear SSH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2020-12-30

Updated: 2021-07-21

Summary

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.

Part	Description	Count
Application	Dropbear_Ssh_Project Dropbear SSH Project Dropbear SSH 2011.54 Dropbear SSH Project Dropbear SSH 2012.54 Dropbear SSH Project Dropbear SSH 2012.55 Dropbear SSH Project Dropbear SSH 2013.56 Dropbear SSH Project Dropbear SSH 2013.57 Dropbear SSH Project Dropbear SSH 2013.58 Dropbear SSH Project Dropbear SSH 2013.59 Dropbear SSH Project Dropbear SSH 2013.60 Dropbear SSH Project Dropbear SSH 2013.61 Dropbear SSH Project Dropbear SSH 2013.62 Dropbear SSH Project Dropbear SSH 2014.63 Dropbear SSH Project Dropbear SSH 2014.64 Dropbear SSH Project Dropbear SSH 2014.65 Dropbear SSH Project Dropbear SSH 2014.66 Dropbear SSH Project Dropbear SSH 2015.67 Dropbear SSH Project Dropbear SSH 2015.68 Dropbear SSH Project Dropbear SSH 2015.69 Dropbear SSH Project Dropbear SSH 2015.70 Dropbear SSH Project Dropbear SSH 2015.71 Dropbear SSH Project Dropbear SSH 2016.72 Dropbear SSH Project Dropbear SSH 2016.73 Dropbear SSH Project Dropbear SSH 2016.74 Dropbear SSH Project Dropbear SSH 2017.75 Dropbear SSH Project Dropbear SSH 2018.76	25