Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Debian 8 DLA-1476-1 Moderate: Dropbear User Enumeration Threat Fix

debian lts
Calendar Grey August 27, 2018
Dist Debian Esm H88
Enhance your Dropbear installation security on Debian 8 against username enumeration attacks by updating and reviewing configurations for robust settings
A vulnerability in dropbear, a lightweight SSH2 server and client, making it possible to guess valid usernames has been found: CVE-2018-15599:
Topics%20covered

Topics Covered

security advisory moderate update Debian dropbear user enumeration SSH2

Summary

The recv_msg_userauth_request function in svr-auth.c in is prone
to a user enumeration vulnerability, similar to CVE-2018-15473 in OpenSSH.

For Debian 8 "Jessie", this problem has been fixed in version
2014.65-1+deb8u3.

We recommend that you upgrade your dropbear packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


<pre><font face="Courier">Package: dropbear
Version: 2014.65-1+deb8u3
CVE ID: CVE-2018-15599
Debian Bug: 906890

Topics%20covered

Topics Covered

security advisory moderate update Debian dropbear user enumeration SSH2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here