Dropbear is prone to a user enumeration vulnerability (CVE-2018-15599). An
external user without credentials can determine whether a given username
exists on a server.
- https://bugs.mageia.org/show_bug.cgi?id=23493
- https://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2018q3/002108.html
- https://www.cve.org/CVERecord?id=CVE-2018-15599
- 6/core/dropbear-2017.75-1.1.mga6
Get the latest Linux and open source security news straight to your inbox.