Medium severity5.5NVD Advisory· Published Mar 3, 2017· Updated Jun 17, 2026
CVE-2016-7409
CVE-2016-7409
Description
The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*range: <=2016.73
- (no CPE)range: <2016.74
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2016/09/15/2nvdMailing ListPatchThird Party Advisory
- secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04nvdIssue TrackingPatchThird Party Advisory
- security.gentoo.org/glsa/201702-23nvdPatchThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/92973nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.