Wind River Support Network

HomeDefectsLIN5-22391
Fixed

LIN5-22391 : Security Advisory - dropbear - CVE-2016-7407

Created: Jan 17, 2017    Updated: May 29, 2018
Resolved Date: Jan 18, 2017
Found In Version: 5.0.1.38
Fix Version: 5.0.1.39
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

dropbearconvert import of OpenSSH keys could run arbitrary code as the local dropbearconvert user when parsing malicious key files

CVE-2016-7407
https://secure.ucc.asn.au/hg/dropbear/rev/34e6127ef02e

Other Downloads


Live chat
Online