Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks.
CVE Informations
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Dropbear_ssh_project>>Dropbear_ssh >> Version To (excluding) 0.49
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.28 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.29 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.30 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.31 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.32 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.33 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.34 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.35 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.36 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.37 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.38 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.39 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.40 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.41 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.42 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.43 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.44 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.44 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.44 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.44 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.44 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.45 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.46 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.47 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.48 (Open CPE detail)
- Dropbear_ssh_project>>Dropbear_ssh >> Version 0.48.1 (Open CPE detail)
