CVE-2016-3116
Fixed in a distro release EPSS 20%
CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.
Products: dropbear_ssh_project dropbear_ssh
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dropbear | 2016.72-1 |
| Debian 13 | dropbear | 2016.72-1 |
| Debian 14 | dropbear | 2016.72-1 |