CVE-2004-2486
Fixed in a distro release EPSS 3%
The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.
Products: dropbear_ssh_project dropbear_ssh
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dropbear | 0.43-2 |
| Debian 13 | dropbear | 0.43-2 |
| Debian 14 | dropbear | 0.43-2 |