dropbear ssh project dropbear ssh

Name: dropbear ssh project dropbear ssh
Brand: dropbear ssh project

productUS

cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical8high10medium0low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	2022.83	2023-12-18	< 2022.83
CVE-2016-3116US	medium6.4	19.8% (97th)	Exploit	no fix	2016-03-22	≤ 2015.71
CVE-2006-1206US	medium5.0	11.7% (96th)	Exploit	no fix	2006-03-14	≤ 0.47
CVE-2013-4434US	medium5.0	5.75% (93rd)	Exploit	2013.59	2013-10-25	< 2013.59
CVE-2016-7406US	critical9.8	10.2% (96th)	—	no fix	2017-03-03	≤ 2016.73
CVE-2013-4421US	medium5.0	6.42% (94th)	—	2013.59	2013-10-25	< 2013.59
CVE-2012-0920US	high7.1	6.42% (94th)	—	no fix	2012-06-05	0.52 → 2012.54
CVE-2016-7407US	critical9.8	5.80% (93rd)	—	no fix	2017-03-03	≤ 2016.73
CVE-2017-9078US	high8.8	5.47% (93rd)	—	2017.75	2017-05-19	< 2017.75
CVE-2016-7408US	high8.8	4.26% (91st)	—	no fix	2017-03-03	≤ 2016.73
CVE-2005-4178US	medium6.5	3.44% (89th)	—	0.47	2005-12-12	< 0.47
CVE-2004-2486US	high7.5	3.03% (87th)	—	0.43	2004-12-31	< 0.43
CVE-2018-15599US	medium5.3	2.69% (86th)	—	no fix	2018-08-21	≤ 2018.76
CVE-2007-1099US	high7.5	2.17% (82nd)	—	0.49	2007-02-26	< 0.49
CVE-2020-36254US	high8.1	1.88% (79th)	—	2020.79	2021-02-25	< 2020.79
CVE-2021-36369US	high7.5	1.86% (79th)	—	no fix	2022-10-12	≤ 2020.81
CVE-2017-2659US	high7.5	1.50% (74th)	—	2013.59	2019-03-21	< 2013.59
CVE-2019-12953US	medium5.3	1.24% (69th)	—	no fix	2020-12-30	2011.54 → 2018.76
CVE-2016-7409US	medium5.5	0.49% (42nd)	—	no fix	2017-03-03	≤ 2016.73
CVE-2017-9079US	medium4.7	0.31% (24th)	—	2017.75	2017-05-19	< 2017.75

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-189CWE-1892 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-399CWE-3992 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-203Observable Discrepancy1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.