VulnerabilityModified

CVE-2005-4178

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.

MEDIUM 6.5EPSS 3.44%

Does this matter?

Lower severity and a low EPSS score (3.44%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 3.44% probability · 88th percentile
CISA KEV: Not listed
Affected: dropbear ssh project/dropbear ssh · debian/debian linux
Source: security@debian.org

References

http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.htmlPatch, Vendor Advisory
http://matt.ucc.asn.au/dropbear/dropbear.htmlPatch, Vendor Advisory
http://secunia.com/advisories/18108Third Party Advisory
http://secunia.com/advisories/18109Third Party Advisory
http://secunia.com/advisories/18142Third Party Advisory
http://www.debian.org/security/2005/dsa-923Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200512-13.xmlThird Party Advisory
http://www.securityfocus.com/bid/15923/Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2005/2962Third Party Advisory
http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.htmlPatch, Vendor Advisory
http://matt.ucc.asn.au/dropbear/dropbear.htmlPatch, Vendor Advisory
http://secunia.com/advisories/18108Third Party Advisory
http://secunia.com/advisories/18109Third Party Advisory
http://secunia.com/advisories/18142Third Party Advisory
http://www.debian.org/security/2005/dsa-923Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200512-13.xmlThird Party Advisory
http://www.securityfocus.com/bid/15923/Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2005/2962Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.