Wind River Support Network

HomeDefectsLIN1018-7330

Fixed

LIN1018-7330 : Security Advisory - dropbear - CVE-2020-36254

Created: Feb 25, 2021 Updated: Mar 23, 2021

Resolved Date: Mar 23, 2021

Found In Version: 10.18.44.1

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.

CREATE(Triage):(User=admin) [CVE-2020-36254|https://nvd.nist.gov/vuln/detail/CVE-2020-36254]

CVEs

CVE-2020-36254