Wind River Support Network

HomeDefectsLIN5-22390
Fixed

LIN5-22390 : Security Advisory - dropbear - CVE-2016-7406

Created: Jan 17, 2017    Updated: May 29, 2018
Resolved Date: Jan 18, 2017
Found In Version: 5.0.1.38
Fix Version: 5.0.1.39
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

A dbclient user who can control username or host arguments could potentially  run arbitrary code as the dbclient user. This could be a problem if scripts or webpages pass untrusted input to the dbclient program.  

CVE-2016-7406
https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcb

Other Downloads


Live chat
Online