CVE-2019-12953
CVE-2019-12953
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.
CVSS 5.3 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
dropbear Debian:12
- Affected ranges
- ECOSYSTEM: < 2019.78-1
Update to 2019.78-1
dropbear Debian:13
- Affected ranges
- ECOSYSTEM: < 2019.78-1
Update to 2019.78-1
dropbear Debian:14
- Affected ranges
- ECOSYSTEM: < 2019.78-1
Update to 2019.78-1
dropbear Ubuntu:16.04:LTS
- Versions
- 2014.65-1ubuntu2
- 2015.68-1
- 2015.70-1
- 2015.71-1
- 2016.72-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dropbear Ubuntu:Pro:18.04:LTS
- Versions
- 2017.75-2
- 2017.75-3build1
- 2017.75-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published