CVE-2016-7407
CriticalSummary
The dropbearconvert command in Dropbear SSH before version 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.
Risk Assessment
Exploitation of this vulnerability could lead to system compromise, posing a serious security threat to the organization.
Recommendation
It is recommended to update Dropbear SSH to version 2016.74 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Dropbear SSH
See all- CVE-2016-7408High
Dbclient in Dropbear SSH before version 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.
- CVE-2016-7406Critical
CVE-2016-7406 in Dropbear SSH before version 2016.74 has a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Original NVD description (English source)
The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.