CVE-2017-9079
CVE-2017-9079
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.
CVSS 4.7 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
dropbear Debian:12
- Affected ranges
- ECOSYSTEM: < 2016.74-5
Update to 2016.74-5
dropbear Debian:13
- Affected ranges
- ECOSYSTEM: < 2016.74-5
Update to 2016.74-5
dropbear Debian:14
- Affected ranges
- ECOSYSTEM: < 2016.74-5
Update to 2016.74-5
dropbear Ubuntu:16.04:LTS
- Versions
- 2014.65-1ubuntu2
- 2015.68-1
- 2015.70-1
- 2015.71-1
- 2016.72-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published