Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/dropbear@2012.55-1.4?distro=trixie
purl pkg:deb/debian/dropbear@2012.55-1.4?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-adtn-2cnz-wfb9 The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed. CVE-2013-4421
VCID-w5xg-8n7z-zqcs Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames. CVE-2013-4434

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:50:57.381595+00:00 Debian Importer Fixing VCID-adtn-2cnz-wfb9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:31:42.581277+00:00 Debian Importer Fixing VCID-w5xg-8n7z-zqcs https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:49:06.660892+00:00 Debian Importer Fixing VCID-adtn-2cnz-wfb9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:21:11.361546+00:00 Debian Importer Fixing VCID-w5xg-8n7z-zqcs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:16:18.038438+00:00 Debian Importer Fixing VCID-adtn-2cnz-wfb9 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:05:09.617121+00:00 Debian Importer Fixing VCID-w5xg-8n7z-zqcs https://security-tracker.debian.org/tracker/data/json 38.1.0