Matt-johnston
4 CVEs tracked since 2017. Since Mar 2017, none of them reached CISA KEV.
Matt-johnston CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2017-03 | 2 | 0 |
| 2017-04 | null or fewer | |
| 2017-05 | 2 | 0 |
Products
The products that kept showing up in Matt-johnston's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 8 most recently published vulnerabilities affecting Matt-johnston.
- CVE-2021-36369An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change...7.5
- CVE-2020-36254scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.8.1
- CVE-2019-12953Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.5.3
- CVE-2018-15599The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messag...5.3
- CVE-2017-9079Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is ...4.7
- CVE-2017-9078The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.8.8
- CVE-2016-7406Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.9.8
- CVE-2016-7407The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.9.8
The record
- Peak rank
- #150 in May 2017
- Busiest month shown
- Mar 2017, 2 CVEs
- Months with a KEV entry
- 0 since Mar 2017
- Monthly snapshots
- 2 since 2017