Known vulnerabilities in Dropbear - page 2

Vendor: Matt Johnston
Software: Dropbear
Software CPE: cpe:2.3:a:matt_johnston:dropbear:*:*:*:*:*:*:*:*
Website: https://matt.ucc.asn.au
Total vulnerabilities: 44
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dropbear Dropbear is affected by 44 known vulnerabilities: 7 high, 24 medium, 13 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU14821 - Exposure of sensitive information to an unauthorized actor
CVE-2017-9079		 CWE-200 Low
No
No
 2017.75 21.09.2018 SB2017051910
SB2017052001
SB2017061387
and 5 more
#VU14820 - Double Free
CVE-2017-9078		 CWE-415 Low
No
No
 2017.75 21.09.2018 SB2017051910
SB2017052001
SB2017061386
and 5 more
#VU32052 - Resource exhaustion
CVE-2017-14223		 CWE-400 Medium
No
No
 - 09.09.2017 SB2017090903
SB2017120741
SB2017091538
#VU33779 - Improper input validation
CVE-2017-14222		 CWE-20 Medium
No
No
 - 09.09.2017 SB2017090905
SB2017120759
SB2017091538
#VU32051 - Improper input validation
CVE-2017-14169		 CWE-20 High
No
No
 - 07.09.2017 SB2017090723
SB2017120756
SB2017092817
and 1 more
#VU33777 - Improper input validation
CVE-2017-14170		 CWE-20 Medium
No
No
 - 07.09.2017 SB2017090725
SB2017120757
SB2017092817
and 1 more
#VU33778 - Improper input validation
CVE-2017-14171		 CWE-20 Medium
No
No
 - 07.09.2017 SB2017090726
SB2017120758
SB2017092817
and 1 more
#VU32050 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-14058		 CWE-835 Medium
No
No
 - 31.08.2017 SB2017083125
SB2017120754
SB2017092817
and 1 more
#VU33763 - Improper input validation
CVE-2017-14054		 CWE-20 Medium
No
No
 - 31.08.2017 SB2017083130
SB2017120743
SB2017091538
#VU33764 - Improper input validation
CVE-2017-14055		 CWE-20 Medium
No
No
 - 31.08.2017 SB2017083131
SB2017120744
SB2017092817
and 1 more
#VU33774 - Improper input validation
CVE-2017-14056		 CWE-20 Medium
No
No
 - 31.08.2017 SB2017083132
SB2017120752
SB2017092817
and 1 more
#VU33775 - Improper input validation
CVE-2017-14057		 CWE-20 Medium
No
No
 - 31.08.2017 SB2017083133
SB2017120753
SB2017092817
and 1 more
#VU33776 - Improper input validation
CVE-2017-14059		 CWE-20 Medium
No
No
 - 31.08.2017 SB2017083134
SB2017120755
SB2017092817
and 1 more
#VU32788 - Improper Resource Shutdown or Release
CVE-2012-2805		 CWE-404 Medium
No
No
 - 28.08.2017 SB2017082807
SB2012070212
#VU32057 - Out-of-bounds read
CVE-2017-11719		 CWE-125 Low
No
No
 - 28.07.2017 SB2017072805
SB2017120751
#VU32056 - Improper input validation
CVE-2017-11665		 CWE-20 Medium
No
No
 - 27.07.2017 SB2017072710
SB2017120750
#VU32055 - Out-of-bounds read
CVE-2017-11399		 CWE-125 Low
No
No
 - 17.07.2017 SB2017071713
SB2017120749
#VU32143 - Memory corruption
CVE-2017-5024		 CWE-119 Low
No
No
 - 17.02.2017 SB2017021712
SB2017021615
SB2017021202
and 1 more
#VU32144 - Memory corruption
CVE-2017-5025		 CWE-119 Low
No
No
 - 17.02.2017 SB2017021713
SB2017021616
SB2017021202
and 1 more
#VU32160 - Memory corruption
CVE-2016-5199		 CWE-119 High
No
No
 - 19.01.2017 SB2017011910
SB2017021613


Showing elements 21 - 40 out of 44