Wind River Support Network

HomeDefectsLIN8-5591

Fixed

LIN8-5591 : Security Advisory - dropbear - CVE-2016-7409

Created: Jan 17, 2017 Updated: Dec 3, 2018

Resolved Date: Jan 17, 2017

Found In Version: 8.0

Fix Version: 8.0.0.14

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

dbclient or dropbear server could expose process memory to the running user if compiled with DEBUG_TRACE and running with -v

CVE-2016-7409
https://secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04

Other Downloads

CVEs

CVE-2016-7409