Known vulnerabilities in Dropbear

Vendor: Matt Johnston
Software: Dropbear
Software CPE: cpe:2.3:a:matt_johnston:dropbear:*:*:*:*:*:*:*:*
Website: https://matt.ucc.asn.au
Total vulnerabilities: 44
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dropbear Dropbear is affected by 44 known vulnerabilities: 7 high, 24 medium, 13 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120176 - Improper Privilege Management
CVE-2025-14282		 CWE-269 Low
No
No
 2025.89 17.12.2025 SB2025121743
SB2025122001
#VU108998 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-47203		 CWE-78 Low
No
No
 2025.88 13.05.2025 SB2025051305
SB2025051565
SB2025051960
and 1 more
#VU79726 - Improper Authentication
CVE-2021-36369		 CWE-287 Medium
No
No
 2022.82 20.08.2023 SB2022101271
SB20230820140
SB20230820141
and 2 more
#VU48013 - NULL Pointer Dereference
 CWE-476 Medium
No
No
 2020.81 29.10.2020 SB2020102938
#VU32873 - Heap-based Buffer Overflow
CVE-2020-14212		 CWE-122 High
No
No
 - 17.06.2020 SB2020061714
SB2020072828
SB2020071101
#VU32875 - Memory corruption
CVE-2019-15942		 CWE-119 High
No
No
 - 05.09.2019 SB2019090524
SB2020072828
SB20200405165
#VU16988 - Improper input validation
CVE-2019-6111		 CWE-20 Low
Available
No
 2025.89 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU14499 - Exposure of sensitive information to an unauthorized actor
CVE-2018-15599		 CWE-200 Low
No
No
 - 22.08.2018 SB2018082303
SB2018091024
#VU32006 - Memory corruption
CVE-2018-1999011		 CWE-119 High
No
No
 - 23.07.2018 SB2018072318
SB2019081682
#VU32007 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1999012		 CWE-835 Medium
No
No
 - 23.07.2018 SB2018072319
SB2019081683
#VU32008 - Use After Free
CVE-2018-1999013		 CWE-416 Medium
No
No
 - 23.07.2018 SB2018072320
SB2019081684
#VU32009 - Out-of-bounds read
CVE-2018-1999014		 CWE-125 Medium
No
No
 - 23.07.2018 SB2018072321
SB2019081685
#VU32010 - Out-of-bounds read
CVE-2018-1999015		 CWE-125 Medium
No
No
 - 23.07.2018 SB2018072322
SB2019081686
#VU32005 - Out-of-bounds read
CVE-2018-13305		 CWE-125 High
No
No
 - 05.07.2018 SB2018070507
SB2019081680
#VU32039 - NULL Pointer Dereference
CVE-2018-13301		 CWE-476 Medium
No
No
 - 05.07.2018 SB2018070508
SB2018042115
#VU32040 - NULL Pointer Dereference
CVE-2018-13303		 CWE-476 Medium
No
No
 - 05.07.2018 SB2018070509
SB2018042117
#VU32041 - Reachable Assertion
CVE-2018-13304		 CWE-617 Medium
No
No
 - 05.07.2018 SB2018070510
SB2018042118
#VU32037 - Improper input validation
CVE-2018-12459		 CWE-20 Medium
No
No
 - 15.06.2018 SB2018061512
SB2018042112
#VU32038 - NULL Pointer Dereference
CVE-2018-12460		 CWE-476 Medium
No
No
 - 15.06.2018 SB2018061513
SB2018042113
#VU32053 - NULL Pointer Dereference
CVE-2017-14225		 CWE-476 High
No
No
 - 09.09.2017 SB2017090904
SB2017120742
SB2017092817
and 1 more


Showing elements 1 - 20 out of 44