CVE-2016-3116: CRLF Injection
CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dropbear SSHto a version that resolves this vulnerability.Fixed in 2016.72
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3116?
CVE-2016-3116 has a medium severity rating due to its potential for remote authenticated users to execute unauthorized commands.
How do I fix CVE-2016-3116?
To fix CVE-2016-3116, upgrade Dropbear SSH to version 2016.72 or later.
Who is affected by CVE-2016-3116?
CVE-2016-3116 affects Dropbear SSH versions prior to 2016.72 used by remote authenticated users.
What type of vulnerability is CVE-2016-3116?
CVE-2016-3116 is a CRLF injection vulnerability that allows command bypass.
What is the impact of CVE-2016-3116?
The impact of CVE-2016-3116 includes the potential for remote authenticated users to circumvent shell-command restrictions.