Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.
| Software | From | Fixed in |
|---|---|---|
| dropbear_ssh_project / dropbear_ssh | - | 2016.73.x |