https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:21:14.376411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-72463 EUVD-2026-72463 2026-10-02T19:21:14.461162+00:00 EUVD-2026-72463 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2659 fkie_cve-2017-2659 2026-10-02T19:21:14.461200+00:00

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.

 https://cve.radiocsirt.org/vuln/ghsa-m7fh-9pv8-fwc2 GHSA-m7fh-9pv8-fwc2 2026-10-02T19:21:14.461234+00:00

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.

 https://cve.radiocsirt.org/vuln/gsd-2017-2659 gsd-2017-2659 2026-10-02T19:21:14.461251+00:00 gsd-2017-2659 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-2659 Withdrawn: UBUNTU-CVE-2017-2659 2026-10-02T19:21:14.461262+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: dropbear

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.