EUVD-2025-209545
GHSA-fwph-xhj4-v8r5
Severity by source
Sources disagree (Low–Critical)AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.
CVSS VectorNVD
Lifecycle Timeline
8DescriptionCVE.org
Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt.
Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437.
AnalysisAI
Remote code execution with complete system compromise affects Net::Dropbear Perl module versions before 0.14 due to bundled vulnerable libtomcrypt library. The module ships with Dropbear 2019.78 or earlier containing libtomcrypt v1.18.1, inheriting CVE-2016-6129 (RSA signature forgery) and CVE-2018-12437 (RSA key recovery via side-channel). CVSS 10.0 reflects network-accessible attack with no authentication or user interaction required and complete confidentiality, integrity, and availability impact with scope change. CISA SSVC framework confirms automatable exploitation with total technical impact, though no active exploitation reported. Patch available in Net::Dropbear 0.14 with updated cryptographic dependencies.
Technical ContextAI
Net::Dropbear is a Perl module (CPE: cpe:2.3:a:atrodo:net::dropbear) that bundles the Dropbear SSH implementation including its cryptographic dependencies. The vulnerability stems from CWE-1395 (Dependency on Vulnerable Third-Party Component) - specifically inherited flaws in the bundled libtomcrypt library v1.18.1 or earlier. CVE-2016-6129 involves RSA PKCS#1 v1.5 signature verification flaws enabling signature forgery through Bleichenbacher-style attacks. CVE-2018-12437 involves RSA key recovery vulnerabilities through timing side-channels during cryptographic operations. These affect core SSH authentication and key exchange mechanisms, making any SSH connections established through Net::Dropbear susceptible to authentication bypass and cryptographic attacks. The compound nature - multiple crypto flaws in a bundled dependency - explains the critical CVSS 10.0 rating despite being library-level vulnerabilities.
RemediationAI
Upgrade to Net::Dropbear version 0.14 or later, which includes updated Dropbear and libtomcrypt versions addressing CVE-2016-6129 and CVE-2018-12437. Installation via CPAN: 'cpan Net::Dropbear' or 'cpanm Net::Dropbear' to pull the latest secure version. Review METACPAN release notes at https://metacpan.org/release/ATRODO/Net-Dropbear-0.14/source/dropbear/libtomcrypt/changes for cryptographic library version updates. If immediate upgrade is not feasible, implement network-level compensating controls: restrict SSH access through Net::Dropbear services to trusted IP ranges using firewall rules (reduces network attack vector from AV:N to effectively local), disable RSA authentication in favor of Ed25519 keys if the application supports algorithm selection (mitigates libtomcrypt RSA-specific flaws but may break compatibility with legacy systems), or replace Net::Dropbear with alternative Perl SSH libraries like Net::SSH::Perl or Net::OpenSSH that use different cryptographic backends (requires application code changes and testing). Note that algorithm restrictions may cause authentication failures with older SSH clients expecting RSA support.
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
.NET and Visual Studio Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely e
Privilege escalation in Microsoft .NET runtimes (8.0, 9.0, and 10.0) and Microsoft Visual Studio 2022 and 2026 results f
Heap-based buffer overflow (CWE-122) in Microsoft .NET enables local code execution across all actively supported .NET r
Local code execution via out-of-bounds write in Microsoft .NET allows an unauthenticated local attacker to achieve full
Local privilege escalation in Microsoft .NET (versions 8.0, 9.0, and 10.0) and Microsoft Visual Studio 2022/2026 allows
Denial-of-service in Microsoft .NET runtimes and Visual Studio allows unauthenticated remote attackers to crash or hang
Integer overflow in Microsoft .NET Framework and modern .NET runtimes enables local code execution with full process com
Use-after-free memory corruption in Microsoft's QUIC protocol implementation (MsQuic) exposes sensitive heap memory to u
Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. [CVSS 7.5 HIGH]
Memory corruption in Go's net library (versions <1.25.10 and 1.26.0-1.26.2) leads to application crash when parsing mali
Denial of service in the Go standard library's net package (on Windows) allows remote attackers to crash applications by
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Low| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 12 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | Fixed |
| SUSE Linux Enterprise Desktop 12 SP4 | Fixed |
| SUSE Linux Enterprise Server 12 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | Fixed |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | Fixed |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today