Wind River Support Network

HomeDefectsLIN8-5592

Fixed

LIN8-5592 : Security Advisory - dropbear - CVE-2016-3116

Created: Jan 17, 2017 Updated: Dec 3, 2018

Resolved Date: Jan 17, 2017

Found In Version: 8.0

Fix Version: 8.0.0.14

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions, found by github.com/tintinweb. Thanks for Damien Miller for a patch. 

CVE-2016-3116

https://secure.ucc.asn.au/hg/dropbear/rev/a3e8389e01ff

Other Downloads

CVEs

CVE-2016-3116