Search for packages
| purl | pkg:deb/debian/dropbear@2022.83-1%2Bdeb12u2 |
| Next non-vulnerable version | 2022.83-1+deb12u3 |
| Latest non-vulnerable version | 2022.83-1+deb12u3 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-z6nh-ddwr-wyap
Aliases: CVE-2025-47203 |
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-z6nh-ddwr-wyap | dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used. |
CVE-2025-47203
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T12:12:51.897427+00:00 | Debian Importer | Affected by | VCID-z6nh-ddwr-wyap | https://security-tracker.debian.org/tracker/data/json | 37.0.0 |
| 2025-08-01T11:49:53.985477+00:00 | Debian Oval Importer | Fixing | VCID-z6nh-ddwr-wyap | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 37.0.0 |