Dropbear Ssh

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.CVE-2016-3116Dropbear Ssh Project · 20% likely
2. Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of servic…CVE-2006-1206Dropbear Ssh Project · 12% likely
3. Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.CVE-2016-7406Dropbear Ssh Project · 10% likely

   CWE-20

4. The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet tha…CVE-2013-4421Dropbear Ssh Project · 6.4% likely

   CWE-189

5. Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to…CVE-2012-0920Dropbear Ssh Project · 6.4% likely

   CWE-399

6. The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.CVE-2016-7407Dropbear Ssh Project · 5.8% likely

   CWE-20

7. Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote…CVE-2013-4434Dropbear Ssh Project · 5.7% likely

   CWE-189

8. The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.CVE-2017-9078Dropbear Ssh Project · 5.5% likely

   CWE-415

9. The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.CVE-2016-7408Dropbear Ssh Project · 4.3% likely

   CWE-284

10. Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an…CVE-2005-4178Dropbear Ssh Project · 3.4% likely
11. The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.CVE-2004-2486Dropbear Ssh Project · 3.0% likely
12. The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_M…CVE-2018-15599Dropbear Ssh Project · 2.7% likely

    CWE-200

13. dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle…CVE-2007-1099Dropbear Ssh Project · 2.2% likely
14. scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.CVE-2020-36254Dropbear Ssh Project · CVSS 8.1 · 1.9% likely
15. An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SS…CVE-2021-36369Dropbear Ssh Project · CVSS 7.5 · 1.9% likely

    CWE-287

16. Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.CVE-2019-12953Dropbear Ssh Project · 1.2% likely

    CWE-203

17. dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.CVE-2025-47203Dropbear SSH Project · CVSS 4.5 · 0.6% likely

    CWE-78

18. The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote i…CVE-2016-7409Dropbear Ssh Project · 0.5% likely

    CWE-200

19. Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/a…CVE-2017-9079Dropbear Ssh Project · 0.3% likely

    CWE-732

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.