Wind River Support Network

HomeDefectsLIN7-7346
Fixed

LIN7-7346 : Security Advisory - dropbear - CVE-2016-3116

Created: Jan 17, 2017    Updated: Sep 8, 2018
Resolved Date: Jan 18, 2017
Found In Version: 7.0
Fix Version: 7.0.0.23
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions, found by github.com/tintinweb. Thanks for Damien Miller for a patch. 

CVE-2016-3116

https://secure.ucc.asn.au/hg/dropbear/rev/a3e8389e01ff

Other Downloads


CVEs


Live chat
Online