CVE-2020-36254: High severity dropbear ssh vulnerability
Published Feb 25, 2021
·Updated
scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.
Affected Software
1 affected component
Dropbear Ssh Project Dropbear Ssh<2020.79
Remediation
Event History
Feb 25, 2021
CVE Published
via MITRE·08:29 AM
Data Sourced
via MITRE·08:29 AM
Description
Data Sourced
via NVD·09:15 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-36254?
The severity of CVE-2020-36254 is classified as a medium vulnerability.
2
How do I fix CVE-2020-36254?
To fix CVE-2020-36254, upgrade Dropbear to version 2020.79 or later.
3
What impact does CVE-2020-36254 have on Dropbear users?
CVE-2020-36254 allows attackers to potentially exploit mishandling of filenames, which may lead to unexpected behavior.
4
Is CVE-2020-36254 related to any other vulnerabilities?
Yes, CVE-2020-36254 is related to CVE-2018-20685.
5
Which versions of Dropbear are affected by CVE-2020-36254?
Dropbear versions before 2020.79 are affected by CVE-2020-36254.