CVE-2017-2659 Information disclosure in dropbear
An attacker can determine valid usernames on Dropbear SSH servers with GSSAPI enabled by observing authentication failure counts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-2659?
CVE-2017-2659 is a medium-severity vulnerability in [UNKNOWN] dropbear, published on 20 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.
Which versions are affected by CVE-2017-2659?
It affects 1 product.
Products include Dropbear Ssh Project Dropbear Ssh.
How do I fix CVE-2017-2659?
Upgrade to a fixed version.
Is CVE-2017-2659 being exploited?
There is no known exploitation of CVE-2017-2659 in the wild and no public exploit code.
Other vulnerabilities in [UNKNOWN] dropbear
Sources
Also known as DEBIAN-CVE-2017-2659, GHSA-m7fh-9pv8-fwc2.