CVE-2016-7407

Critical

Published: 03/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The dropbearconvert command in Dropbear SSH before version 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.

Exploitation of this vulnerability could lead to system compromise, posing a serious security threat to the organization.

It is recommended to update Dropbear SSH to version 2016.74 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.