Wind River Support Network

HomeDefectsLIN8-5589
Fixed

LIN8-5589 : Security Advisory - dropbear - CVE-2016-7407

Created: Jan 17, 2017    Updated: Dec 3, 2018
Resolved Date: Jan 17, 2017
Found In Version: 8.0
Fix Version: 8.0.0.14
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

dropbearconvert import of OpenSSH keys could run arbitrary code as the local dropbearconvert user when parsing malicious key files

CVE-2016-7407
https://secure.ucc.asn.au/hg/dropbear/rev/34e6127ef02e

Other Downloads


CVEs


Live chat
Online