Wind River Support Network

HomeDefectsLIN5-23113
Fixed

LIN5-23113 : Security Advisory - dropbear - CVE-2017-9078

Created: May 25, 2017    Updated: May 29, 2018
Resolved Date: Jul 20, 2017
Found In Version: 5.0.1.39
Fix Version: 5.0.1.41
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.

https://nvd.nist.gov/vuln/detail/CVE-2017-9078

Other Downloads


Live chat
Online