CVE-2012-0920 - CVE House
Back to Database
Status published High CVE-2012-0920

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when...

Vulnerability Description

Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-0920

Credits & Attribution

No credits recorded in the NVD database.

References

More from dropbear ssh project

View All →
CVE-2021-36369
An issue was discovered in Dropbear through 2020.81. Due to...
Unknown 0
CVE-2020-36254
scp.c in Dropbear before 2020.79 mishandles the filename of ....
Unknown 0
CVE-2019-12953
Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that...
Medium 5.3
CVE-2017-9079
Dropbear before 2017.75 might allow local users to read certain...
Medium 4.7
CVE-2017-9078
The server in Dropbear before 2017.75 might allow post-authentication root...
High 8.8

Affected Vendor

dropbear ssh project

View all reports →

Affected Software

dropbear ssh, debian linux
Vulnerable Versions:
0.52, 6.0, 7.0

Timeline

Official Publish: June 5th, 2012
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.