CVE-2017-9079

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option

published May 19, 2017

CVSS
—
EPSS
0%
Percentile
22.6
In the wild
Unconfirmed
What it is

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.6th percentile
Published
2017-05-19T14:00Z
EPSS history
Timeline
  • 19 MAY 14:00Z
    Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option
    cvelistv5