Information Disclosure

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_M…CVE-2018-15599Dropbear Ssh Project · 2.7% likely

   CWE-200

2. It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failur…CVE-2017-2659Dropbear Ssh Project · CVSS 5.3 · 1.5% likely

   CWE-209

3. Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.CVE-2019-12953Dropbear Ssh Project · 1.2% likely

   CWE-203

4. The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote i…CVE-2016-7409Dropbear Ssh Project · 0.5% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.