CVE-2020-36254

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-36254

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36254.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-36254

Related

UBUNTU-CVE-2020-36254

Published

2021-02-25T09:15:13Z

Modified

2024-08-01T09:16:59.392864Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.

References

Affected packages

Alpine:v3.10 / dropbear

Package

Name: dropbear
Purl: pkg:apk/alpine/dropbear?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2019.78-r1

Affected versions

0.*

0.52-r0

0.52-r1

0.52-r2

0.52-r3

0.52-r4

0.53.1-r0

0.53.1-r1

2012.*

2012.55-r0

2013.*

2013.58-r0

2014.*

2014.63-r0

2014.65-r0

2014.66-r0

2014.66-r1

2015.*

2015.67-r0

2015.68-r0

2015.68-r1

2015.68-r2

2015.70-r2

2015.71-r0

2015.71-r1

2016.*

2016.73-r0

2016.74-r0

2016.74-r1

2017.*

2017.75-r0

2017.75-r1

2018.*

2018.76-r0

2018.76-r1

2018.76-r2

2019.*

2019.78-r0

Alpine:v3.11 / dropbear

Package

Name: dropbear
Purl: pkg:apk/alpine/dropbear?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2019.78-r1

Affected versions

0.*

0.52-r0

0.52-r1

0.52-r2

0.52-r3

0.52-r4

0.53.1-r0

0.53.1-r1

2012.*

2012.55-r0

2013.*

2013.58-r0

2014.*

2014.63-r0

2014.65-r0

2014.66-r0

2014.66-r1

2015.*

2015.67-r0

2015.68-r0

2015.68-r1

2015.68-r2

2015.70-r2

2015.71-r0

2015.71-r1

2016.*

2016.73-r0

2016.74-r0

2016.74-r1

2017.*

2017.75-r0

2017.75-r1

2018.*

2018.76-r0

2018.76-r1

2018.76-r2

2019.*

2019.78-r0

Alpine:v3.12 / dropbear

Package

Name: dropbear
Purl: pkg:apk/alpine/dropbear?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2019.78-r1

Affected versions

0.*

0.52-r0

0.52-r1

0.52-r2

0.52-r3

0.52-r4

0.53.1-r0

0.53.1-r1

2012.*

2012.55-r0

2013.*

2013.58-r0

2014.*

2014.63-r0

2014.65-r0

2014.66-r0

2014.66-r1

2015.*

2015.67-r0

2015.68-r0

2015.68-r1

2015.68-r2

2015.70-r2

2015.71-r0

2015.71-r1

2016.*

2016.73-r0

2016.74-r0

2016.74-r1

2017.*

2017.75-r0

2017.75-r1

2018.*

2018.76-r0

2018.76-r1

2018.76-r2

2019.*

2019.78-r0

Debian:11 / dropbear

Package

Name: dropbear
Purl: pkg:deb/debian/dropbear?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2020.79-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / dropbear

Package

Name: dropbear
Purl: pkg:deb/debian/dropbear?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2020.79-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / dropbear

Package

Name: dropbear
Purl: pkg:deb/debian/dropbear?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2020.79-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Git / github.com/mkj/dropbear

Affected ranges

Type: GIT
Repo: https://github.com/mkj/dropbear
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

8f8a3dff705fad774a10864a2e3dbcfa9779ceff

Affected versions

DROPBEAR_0.*

DROPBEAR_0.44

DROPBEAR_0.44test1

DROPBEAR_0.44test2

DROPBEAR_0.44test3

DROPBEAR_0.44test4

DROPBEAR_0.45

DROPBEAR_0.46

DROPBEAR_0.47

DROPBEAR_0.48

DROPBEAR_0.48.1

DROPBEAR_0.49

DROPBEAR_0.50

DROPBEAR_0.51

DROPBEAR_0.52

DROPBEAR_0.53

DROPBEAR_0.53.1

DROPBEAR_2011.*

DROPBEAR_2011.54

DROPBEAR_2012.*

DROPBEAR_2012.55

DROPBEAR_2013.*

DROPBEAR_2013.56

DROPBEAR_2013.57

DROPBEAR_2013.58

DROPBEAR_2013.59

DROPBEAR_2013.60

DROPBEAR_2013.61test

DROPBEAR_2013.62

DROPBEAR_2014.*

DROPBEAR_2014.63

DROPBEAR_2014.64

DROPBEAR_2014.65

DROPBEAR_2014.66

DROPBEAR_2015.*

DROPBEAR_2015.67

DROPBEAR_2015.68

DROPBEAR_2015.69

DROPBEAR_2015.70

DROPBEAR_2015.71

DROPBEAR_2016.*

DROPBEAR_2016.72

DROPBEAR_2016.73

DROPBEAR_2016.74

DROPBEAR_2017.*

DROPBEAR_2017.75

DROPBEAR_2018.*

DROPBEAR_2018.76

DROPBEAR_2019.*

DROPBEAR_2019.77

DROPBEAR_2019.78

libtomcrypt-1.*

libtomcrypt-1.05

libtomcrypt-1.16

libtommath-0.*

libtommath-0.35

libtommath-0.40