CVE-2017-9078

HIGH EPSS 91.4%

Published May 19, 20179y ago · Modified Jun 17, 20262w ago

8.8 CVSS 3.1

High

Published May 19, 2017 9y ago

Last Modified Jun 17, 2026 2w ago

Description

The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.

CVSS Details

Base Score

8.8

Exploitability

2.8

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

91.4% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-415

Affected Products 4

Vendor	Product	Version	Range
dropbear_ssh_project	dropbear_ssh	*	<2017.75
debian	debian_linux	8.0	any
netapp	h410c_firmware	*	any
netapp	h410c	*	any

References 3

lists.ucc.gu.uwa.edu.au http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html

Mailing ListPatchThird Party Advisory
debian.org http://www.debian.org/security/2017/dsa-3859

Third Party Advisory
security.netapp.com https://security.netapp.com/advisory/ntap-20191004-0006/

Third Party Advisory

Remediation

lists.ucc.gu.uwa.edu.au http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html

Mailing ListPatchThird Party Advisory