PT-2025-51833 · Dropbear+1 · Dropbear+1

Published 2025-01-01 · Updated 2026-02-18 · CVE-2025-14282

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dropbear versions 2024.84 through 2025.88

Description A flaw exists in Dropbear when operating in multi-user mode and authenticating users. The Dropbear SSH server performs socket forwardings as root, switching to the logged-in user only when a shell is spawned or file operations are performed. The introduction of unix domain socket forwarding allows any authenticated user to connect to any unix socket with root privileges, bypassing file system restrictions and SO PEERCRED/SO PASSCRED checks. This could potentially allow an attacker to gain a root shell. The issue affects a significant number of routers and IoT devices. The vulnerability involves incorrect permission handling in the Dropbear SSH server.

Recommendations Upgrade Dropbear to version 2025.89 or later.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-14282

DSA-6086-1

Affected Products

Debian

Dropbear

References · 29

• https://security-tracker.debian.org/tracker/CVE-2025-14282 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14282 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14282 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14282 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-14282 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-14282 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-14282 · Security Note
• https://github.com/mkj/dropbear/pull/394 · Note
• https://github.com/mkj/dropbear/pull/391 · Note
• https://twitter.com/oss_security/status/2004413083725463666 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2025-14282 · Note
• https://twitter.com/Cezar_H_Linux/status/2005698676111630838 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1pswxeg/top_10_trending_cves_22122025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1pukw3c/top_10_trending_cves_24122025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1pxosu8/top_10_trending_cves_28122025 · Reddit Post