Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-d17n-u3cw-cudj
SummaryIt was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.
Aliases
0
alias CVE-2017-2659
Fixed_packages
0
url pkg:deb/debian/dropbear@2013.60-1?distro=trixie
purl pkg:deb/debian/dropbear@2013.60-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2013.60-1%3Fdistro=trixie
1
url pkg:deb/debian/dropbear@2014.65-1
purl pkg:deb/debian/dropbear@2014.65-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ucx-wdc2-tuad
1
vulnerability VCID-8apc-5c8s-k3ar
2
vulnerability VCID-9pmf-w3x7-5ugr
3
vulnerability VCID-9vje-sxgj-9udj
4
vulnerability VCID-a8c1-84ye-73en
5
vulnerability VCID-d3s7-uqk1-47bq
6
vulnerability VCID-fkyw-zr2t-y7dm
7
vulnerability VCID-gdx4-w6cw-2kek
8
vulnerability VCID-hmcm-aqkc-zfdm
9
vulnerability VCID-jzn6-bzzf-nugp
10
vulnerability VCID-qftg-znh3-5kep
11
vulnerability VCID-s1dw-5sgq-j3bm
12
vulnerability VCID-xqe7-wtdn-hugk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2014.65-1
2
url pkg:deb/debian/dropbear@2020.81-3%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/dropbear@2020.81-3%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2020.81-3%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/dropbear@2022.83-1%2Bdeb12u3?distro=trixie
purl pkg:deb/debian/dropbear@2022.83-1%2Bdeb12u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2022.83-1%252Bdeb12u3%3Fdistro=trixie
4
url pkg:deb/debian/dropbear@2025.89-1~deb13u1?distro=trixie
purl pkg:deb/debian/dropbear@2025.89-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2025.89-1~deb13u1%3Fdistro=trixie
5
url pkg:deb/debian/dropbear@2025.89-1?distro=trixie
purl pkg:deb/debian/dropbear@2025.89-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2025.89-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/dropbear@0.45-2sarge0
purl pkg:deb/debian/dropbear@0.45-2sarge0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5kyz-5rns-2qfy
1
vulnerability VCID-6ucx-wdc2-tuad
2
vulnerability VCID-8apc-5c8s-k3ar
3
vulnerability VCID-9pmf-w3x7-5ugr
4
vulnerability VCID-9vje-sxgj-9udj
5
vulnerability VCID-a8c1-84ye-73en
6
vulnerability VCID-adtn-2cnz-wfb9
7
vulnerability VCID-d17n-u3cw-cudj
8
vulnerability VCID-d3s7-uqk1-47bq
9
vulnerability VCID-fkyw-zr2t-y7dm
10
vulnerability VCID-gdx4-w6cw-2kek
11
vulnerability VCID-guvt-ddvk-dbdk
12
vulnerability VCID-hmcm-aqkc-zfdm
13
vulnerability VCID-jd36-dxz7-dfdy
14
vulnerability VCID-jzn6-bzzf-nugp
15
vulnerability VCID-qftg-znh3-5kep
16
vulnerability VCID-rwzw-vrhk-sqfw
17
vulnerability VCID-s1dw-5sgq-j3bm
18
vulnerability VCID-uz94-gzud-euhk
19
vulnerability VCID-w5xg-8n7z-zqcs
20
vulnerability VCID-xqe7-wtdn-hugk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@0.45-2sarge0
1
url pkg:deb/debian/dropbear@0.48.1-2
purl pkg:deb/debian/dropbear@0.48.1-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ucx-wdc2-tuad
1
vulnerability VCID-8apc-5c8s-k3ar
2
vulnerability VCID-9pmf-w3x7-5ugr
3
vulnerability VCID-9vje-sxgj-9udj
4
vulnerability VCID-a8c1-84ye-73en
5
vulnerability VCID-adtn-2cnz-wfb9
6
vulnerability VCID-d17n-u3cw-cudj
7
vulnerability VCID-d3s7-uqk1-47bq
8
vulnerability VCID-fkyw-zr2t-y7dm
9
vulnerability VCID-gdx4-w6cw-2kek
10
vulnerability VCID-guvt-ddvk-dbdk
11
vulnerability VCID-hmcm-aqkc-zfdm
12
vulnerability VCID-jd36-dxz7-dfdy
13
vulnerability VCID-jzn6-bzzf-nugp
14
vulnerability VCID-qftg-znh3-5kep
15
vulnerability VCID-s1dw-5sgq-j3bm
16
vulnerability VCID-w5xg-8n7z-zqcs
17
vulnerability VCID-xqe7-wtdn-hugk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@0.48.1-2
2
url pkg:deb/debian/dropbear@0.51-1
purl pkg:deb/debian/dropbear@0.51-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ucx-wdc2-tuad
1
vulnerability VCID-8apc-5c8s-k3ar
2
vulnerability VCID-9pmf-w3x7-5ugr
3
vulnerability VCID-9vje-sxgj-9udj
4
vulnerability VCID-a8c1-84ye-73en
5
vulnerability VCID-adtn-2cnz-wfb9
6
vulnerability VCID-d17n-u3cw-cudj
7
vulnerability VCID-d3s7-uqk1-47bq
8
vulnerability VCID-fkyw-zr2t-y7dm
9
vulnerability VCID-gdx4-w6cw-2kek
10
vulnerability VCID-hmcm-aqkc-zfdm
11
vulnerability VCID-jd36-dxz7-dfdy
12
vulnerability VCID-jzn6-bzzf-nugp
13
vulnerability VCID-qftg-znh3-5kep
14
vulnerability VCID-s1dw-5sgq-j3bm
15
vulnerability VCID-w5xg-8n7z-zqcs
16
vulnerability VCID-xqe7-wtdn-hugk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@0.51-1
3
url pkg:deb/debian/dropbear@0.52-5%2Bsqueeze1
purl pkg:deb/debian/dropbear@0.52-5%2Bsqueeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ucx-wdc2-tuad
1
vulnerability VCID-8apc-5c8s-k3ar
2
vulnerability VCID-9pmf-w3x7-5ugr
3
vulnerability VCID-9vje-sxgj-9udj
4
vulnerability VCID-a8c1-84ye-73en
5
vulnerability VCID-adtn-2cnz-wfb9
6
vulnerability VCID-d17n-u3cw-cudj
7
vulnerability VCID-d3s7-uqk1-47bq
8
vulnerability VCID-fkyw-zr2t-y7dm
9
vulnerability VCID-gdx4-w6cw-2kek
10
vulnerability VCID-hmcm-aqkc-zfdm
11
vulnerability VCID-jd36-dxz7-dfdy
12
vulnerability VCID-jzn6-bzzf-nugp
13
vulnerability VCID-qftg-znh3-5kep
14
vulnerability VCID-s1dw-5sgq-j3bm
15
vulnerability VCID-w5xg-8n7z-zqcs
16
vulnerability VCID-xqe7-wtdn-hugk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@0.52-5%252Bsqueeze1
4
url pkg:deb/debian/dropbear@2012.55-1.3
purl pkg:deb/debian/dropbear@2012.55-1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ucx-wdc2-tuad
1
vulnerability VCID-8apc-5c8s-k3ar
2
vulnerability VCID-9pmf-w3x7-5ugr
3
vulnerability VCID-9vje-sxgj-9udj
4
vulnerability VCID-a8c1-84ye-73en
5
vulnerability VCID-adtn-2cnz-wfb9
6
vulnerability VCID-d17n-u3cw-cudj
7
vulnerability VCID-d3s7-uqk1-47bq
8
vulnerability VCID-fkyw-zr2t-y7dm
9
vulnerability VCID-gdx4-w6cw-2kek
10
vulnerability VCID-hmcm-aqkc-zfdm
11
vulnerability VCID-jzn6-bzzf-nugp
12
vulnerability VCID-qftg-znh3-5kep
13
vulnerability VCID-s1dw-5sgq-j3bm
14
vulnerability VCID-w5xg-8n7z-zqcs
15
vulnerability VCID-xqe7-wtdn-hugk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2012.55-1.3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-2659
reference_id
reference_type
scores
0
value 0.00275
scoring_system epss
scoring_elements 0.51048
published_at 2026-04-18T12:55:00Z
1
value 0.00275
scoring_system epss
scoring_elements 0.51021
published_at 2026-04-12T12:55:00Z
2
value 0.00275
scoring_system epss
scoring_elements 0.51004
published_at 2026-04-13T12:55:00Z
3
value 0.00275
scoring_system epss
scoring_elements 0.50909
published_at 2026-04-01T12:55:00Z
4
value 0.00275
scoring_system epss
scoring_elements 0.50963
published_at 2026-04-02T12:55:00Z
5
value 0.00275
scoring_system epss
scoring_elements 0.50988
published_at 2026-04-04T12:55:00Z
6
value 0.00275
scoring_system epss
scoring_elements 0.50945
published_at 2026-04-07T12:55:00Z
7
value 0.00275
scoring_system epss
scoring_elements 0.51002
published_at 2026-04-08T12:55:00Z
8
value 0.00275
scoring_system epss
scoring_elements 0.50999
published_at 2026-04-09T12:55:00Z
9
value 0.00275
scoring_system epss
scoring_elements 0.51042
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-2659
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2659
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2659
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2659
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2659
3
reference_url https://secure.ucc.asn.au/hg/dropbear/rev/d7784616409a#l1.86
reference_id
reference_type
scores
url https://secure.ucc.asn.au/hg/dropbear/rev/d7784616409a#l1.86
4
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-2659
reference_id CVE-2017-2659
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2017-2659
Weaknesses
0
cwe_id 209
name Generation of Error Message Containing Sensitive Information
description The product generates an error message that includes sensitive information about its environment, users, or associated data.
1
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Exploits
Severity_range_score5.0 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-d17n-u3cw-cudj