Wind River Support Network

HomeDefectsLIN8-5589

Fixed

LIN8-5589 : Security Advisory - dropbear - CVE-2016-7407

Created: Jan 17, 2017 Updated: Dec 3, 2018

Resolved Date: Jan 17, 2017

Found In Version: 8.0

Fix Version: 8.0.0.14

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

dropbearconvert import of OpenSSH keys could run arbitrary code as the local dropbearconvert user when parsing malicious key files

CVE-2016-7407
https://secure.ucc.asn.au/hg/dropbear/rev/34e6127ef02e

Other Downloads

CVEs

CVE-2016-7407