CVE-2012-0920

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote…

published June 5, 2012

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06417 · 93.6th percentile
Published
2012-06-05T22:00Z
EPSS history
Timeline
  • 05 JUN 22:00Z
    Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote…
    cvelistv5