CVE-2017-9079

Severity: medium (CVSS 4.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-19 · updated 2026-06-17
Weakness: CWE-732

Description

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.

Affected products

Debian Linux: 8.0
[UNKNOWN] dropbear: before 2017.75 — fixed in 2017.75

How to fix

Upgrade to a fixed version: [UNKNOWN] dropbear 2017.75. Check the vendor advisory for mitigations.

References

http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html
http://www.debian.org/security/2017/dsa-3859
https://security.netapp.com/advisory/ntap-20191004-0006/
http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html
http://www.debian.org/security/2017/dsa-3859
https://security.netapp.com/advisory/ntap-20191004-0006/

Get alerted when CVE-2017-9079 or the next vulnerability affects your stack