vulnerability

Alpine Linux: CVE-2016-3116: dropbear X11 forwarding input not validated properly

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:L/Au:S/C:P/I:P/A:N)	2016-03-22	2017-08-30	2017-10-30

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:P/A:N)

Published

2016-03-22

Added

2017-08-30

Modified

2017-10-30

Description

CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.

Solution

alpine-linux-upgrade-dropbear

References

ALPINE-5291
ALPINE-5292
ALPINE-5293
CVE-2016-3116
https://attackerkb.com/topics/CVE-2016-3116

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today