Vulnerabilities > Dropbear SSH Project > Dropbear SSH > 2014.64

DATE CVE VULNERABILITY TITLE RISK
2017-03-03 CVE-2016-7406 Improper Input Validation vulnerability in Dropbear SSH Project Dropbear SSH
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
network
low complexity
dropbear-ssh-project CWE-20
critical
 10.0
10
2016-03-22 CVE-2016-3116 Security Bypass vulnerability in Dropbear SSH
CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.
network
low complexity
dropbear-ssh-project
5.5
5.5