CVE-2016-7408
HighSummary
Dbclient in Dropbear SSH before version 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise.
Recommendation
It is recommended to update Dropbear SSH to version 2016.74 or later to mitigate this vulnerability.
Other vulnerabilities in Dropbear SSH
See all- CVE-2016-7407Critical
The dropbearconvert command in Dropbear SSH before version 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.
- CVE-2016-7406Critical
CVE-2016-7406 in Dropbear SSH before version 2016.74 has a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
Original NVD description (English source)
The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.