CVE-2016-7406

Critical

Published: 03/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-7406 in Dropbear SSH before version 2016.74 has a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system takeover or access to sensitive data.

Recommendation

It is recommended to update Dropbear SSH to the latest version to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Original NVD description (English source)

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.