Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-2486

Fixed in a distro release EPSS 3%

The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.

Published 2005-10-25 · CVE record · OSV

Products: dropbear_ssh_project dropbear_ssh

Distro releases

ReleasePackageFixed in
Debian 12dropbear0.43-2
Debian 13dropbear0.43-2
Debian 14dropbear0.43-2