PT-2017-18690 · Dropbear+1 · Dropbear+1

Published 2017-05-18 · Updated 2019-10-04 · CVE-2017-9079

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dropbear versions prior to 2017.75 Dropbear (affected versions not specified) is not applicable here as we have specific version information.

Description The issue allows local users to read certain files as root, given that the file has the authorized keys file format with a command= option. This occurs because ~/.ssh/authorized keys is read with root privileges and symlinks are followed.

Recommendations For versions prior to 2017.75, update to version 2017.75 or later to resolve the issue. As a temporary workaround, consider restricting access to the ~/.ssh/authorized keys file to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

ALT-PU-2017-1666

BDU:2025-13197

CVE-2017-9079

DLA-948-1

DSA-3859-1

MGASA-2017-0165

Affected Products

Alt Linux

Dropbear

References · 19

• https://ubuntu.com/security/CVE-2017-9079 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-9079 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3859-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9079 · Vendor Advisory
• http://debian.org/security/2017/dsa-3859 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9079 · Security Note
• http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html · Patch
• https://osv.dev/vulnerability/MGASA-2017-0165 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-9079 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9079 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13197 · Security Note
• https://advisories.mageia.org/MGASA-2017-0165.html · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2017-9079 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-9079 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=20901 · Note