CVE-2019-12953
Fixed in a distro release EPSS 1%
Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.
Products: dropbear_ssh_project dropbear_ssh
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dropbear | 2019.78-1 |
| Debian 13 | dropbear | 2019.78-1 |
| Debian 14 | dropbear | 2019.78-1 |
| Ubuntu 16.04 LTS | dropbear | no fix |
| Ubuntu Pro 18.04 LTS | dropbear | no fix |