CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
EPSS
Percentile
90.7%
This update for dropbear fixes the following issues :
dropbear was updated to upstream version 2016.72
Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions, found by github.com/tintinweb. Thanks for Damien Miller for a patch.
used as bug fix release for boo#970633 - CVE-2016-3116
dropbear was updated to upstream version 2015.71
Fix ‘bad buf_incrpos’ when data is transferred, broke in 2015.69
Fix crash on exit when -p address:port is used, broke in 2015.68
Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev
Fix bad configure script test which didn’t work with dash shell, patch from Juergen Daubert, broke in 2015.70
Fix server race condition that could cause sessions to hang on exit, https://github.com/robotframework/SSHLibrary/issues/128
dropbear was updated to upstream version 2015.70
Fix server password authentication on Linux, broke in 2015.69
Fix crash when forwarded TCP connections fail to connect (bug introduced in 2015.68)
Avoid hang on session close when multiple sessions are started, affects Qt Creator Patch from Andrzej Szombierski
Reduce per-channel memory consumption in common case, increase default channel limit from 100 to 1000 which should improve SOCKS forwarding for modern webpages
Handle multiple command line arguments in a single flag, thanks to Guilhem Moulin
Manpage improvements from Guilhem Moulin
Build fixes for Android from Mike Frysinger
Don’t display the MOTD when an explicit command is run from Guilhem Moulin
Check curve25519 shared secret isn’t zero
dropbear was updated to upstream version 2015.68
Reduce local data copying for improved efficiency.
Measured 30% increase in throughput for connections to localhost
Forwarded TCP ports connect asynchronously and try all available addresses (IPv4, IPv6, round robin DNS)
Fix all compile warnings, many patches from Gaël Portay Note that configure with -Werror may not be successful on some platforms (OS X) and some configuration options may still result in unused variable warnings.
Use TCP Fast Open on Linux if available. Saves a round trip at connection to hosts that have previously been connected. Needs a recent Linux kernel and possibly ‘sysctl -w net.ipv4.tcp_fastopen=3’ Client side is disabled by default pending further compatibility testing with networks and systems.
Increase maximum command length to 9000 bytes
Free memory before exiting, patch from Thorsten Horstmann. Useful for Dropbear ports to embedded systems and for checking memory leaks with valgrind. Only partially implemented for dbclient. This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h
DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless there is a leading slash (~ isn’t treated specially)
Fix small ECC memory leaks
Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of Matta Consulting. Odds of bad values are around 2**-512 – improbable.
Twofish-ctr cipher is supported though disabled by default
Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks to CL Ouyang
Fix NULL pointer crash with restrictions in authorized_keys without a command, patch from Guilhem Moulin
Ensure authentication timeout is handled while reading the initial banner, thanks to CL Ouyang for finding it.
Fix NULL pointer crash when handling bad ECC keys. Found by afl-fuzz
dropbear was updated to upstream version 2015.67
Call fsync() after generating private keys to ensure they aren’t lost if a reboot occurs. Thanks to Peter Korsgaard
Disable non-delayed zlib compression by default on the server. Can be enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB
Default client key path ~/.ssh/id_dropbear
Prefer stronger algorithms by default, from Fedor Brunner. AES256 over 3DES Diffie-hellman group14 over group1
Add option to disable CBC ciphers.
Disable twofish in default options.h
Enable sha2 HMAC algorithms by default, the code was already required for ECC key exchange. sha1 is the first preference still for performance.
Fix installing dropbear.8 in a separate build directory, from Like Ma
Allow configure to succeed if libtomcrypt/libtommath are missing, from Elan Ruusamäe
Don’t crash if ssh-agent provides an unknown type of key. From Catalin Patulea
Minor bug fixes, a few issues found by Coverity scan
dropbear was updated to upstream version 2014.66
Use the same keepalive handling behaviour as OpenSSH.
This will work better with some SSH implementations that have different behaviour with unknown message types.
Don’t reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own keepalive message
Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere
Fix wtmp which broke since 2013.62, patch from Whoopie
dropbear was updated to upstream version 2014.65
Fix 2014.64 regression, server session hang on exit with scp (and probably others), thanks to NiLuJe for tracking it down
Fix 2014.64 regression, clock_gettime() error handling which broke on older Linux kernels, reported by NiLuJe
Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which wasn’t caught
Avoid error message when trying to set QoS on proxycommand or multihop pipes
Use /usr/bin/xauth, thanks to Mike Frysinger
Don’t exit the client if the local user entry can’t be found, thanks to iquaba
added missing systemd entries for dropbear-keygen.service
dropbear was updated to upstream version 2014.64
Fix compiling with ECDSA and DSS disabled
Don’t exit abruptly if too many outgoing packets are queued for writev(). Patch thanks to Ronny Meeus
The -K keepalive option now behaves more like OpenSSH’s ‘ServerAliveInterval’. If no response is received after 3 keepalives then the session is terminated. This will close connections faster than waiting for a TCP timeout.
Rework TCP priority setting. New settings are if (connecting || ptys || x11) tos = LOWDELAY else if (tcp_forwards) tos = 0 else tos = BULK Thanks to Catalin Patulea for the suggestion.
Improve handling of many concurrent new TCP forwarded connections, should now be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting and investigating it.
Make sure that exit messages from the client are printed, regression in 2013.57
Use monotonic clock where available, timeouts won’t be affected by system time changes
Add -V for version
dropbear was updated regular init script to also create ECDSA keys
update to upstream version 2014.63
Fix ~. to terminate a client interactive session after waking a laptop from sleep.
Changed port separator syntax again, now using host^port. This is because IPv6 link-local addresses use %. Reported by Gui Iribarren
Avoid constantly relinking dropbearmulti target, fix ‘make install’ for multi target, thanks to Mike Frysinger
Avoid getting stuck in a loop writing huge key files, reported by Bruno Thomsen
Don’t link dropbearkey or dropbearconvert to libz or libutil, thanks to Nicolas Boos
Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos
Avoid crash on exit due to cleaned up keys before last packets are sent, debugged by Ronald Wahl
Fix a race condition in rekeying where Dropbear would exit if it received a still-in-flight packet after initiating rekeying. Reported by Oliver Metz. This is a longstanding bug but is triggered more easily since 2013.57
[…]
dropbear was updated service files and activated building of ecdsa keys
only package the old init service in distributions without systemd
imported upstream version 2013.62
Disable ‘interactive’ QoS connection options when a connection doesn’t have a PTY (eg scp, rsync). Thanks to Catalin Patulea for the patch.
Log when a hostkey is generated with -R, fix some bugs in handling server hostkey commandline options
Fix crash in Dropbearconvert and 521 bit key, reported by NiLuJe
Update config.guess and config.sub again
ECC (elliptic curve) support. Supports ECDSA hostkeys (requires new keys to be generated) and ECDH for setting up encryption keys (no intervention required). This is significantly faster.
[email protected] support for setting up encryption keys. This is another elliptic curve mode with less potential of NSA interference in algorithm parameters. curve25519-donna code thanks to Adam Langley
-R option to automatically generate hostkeys. This is recommended for embedded platforms since it allows the system random number device /dev/urandom a longer startup time to generate a secure seed before the hostkey is required.
Compile fixes for old vendor compilers like Tru64 from Daniel Richard G.
Make authorized_keys handling more robust, don’t exit encountering malformed lines. Thanks to Lorin Hochstein and Mark Stillwell
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2016-393.
#
# The text description of this plugin is (C) SUSE LLC.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(90168);
script_version("2.5");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");
script_cve_id("CVE-2016-3116");
script_name(english:"openSUSE Security Update : dropbear (openSUSE-2016-393)");
script_summary(english:"Check for the openSUSE-2016-393 patch");
script_set_attribute(
attribute:"synopsis",
value:"The remote openSUSE host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"This update for dropbear fixes the following issues :
- dropbear was updated to upstream version 2016.72
- Validate X11 forwarding input. Could allow bypass of
authorized_keys command= restrictions, found by
github.com/tintinweb. Thanks for Damien Miller for a
patch.
- used as bug fix release for boo#970633 - CVE-2016-3116
- dropbear was updated to upstream version 2015.71
- Fix 'bad buf_incrpos' when data is transferred, broke in
2015.69
- Fix crash on exit when -p address:port is used, broke in
2015.68
- Fix building with only ENABLE_CLI_REMOTETCPFWD given,
patch from Konstantin Tokarev
- Fix bad configure script test which didn't work with
dash shell, patch from Juergen Daubert, broke in 2015.70
- Fix server race condition that could cause sessions to
hang on exit,
https://github.com/robotframework/SSHLibrary/issues/128
- dropbear was updated to upstream version 2015.70
- Fix server password authentication on Linux, broke in
2015.69
- Fix crash when forwarded TCP connections fail to connect
(bug introduced in 2015.68)
- Avoid hang on session close when multiple sessions are
started, affects Qt Creator Patch from Andrzej
Szombierski
- Reduce per-channel memory consumption in common case,
increase default channel limit from 100 to 1000 which
should improve SOCKS forwarding for modern webpages
- Handle multiple command line arguments in a single flag,
thanks to Guilhem Moulin
- Manpage improvements from Guilhem Moulin
- Build fixes for Android from Mike Frysinger
- Don't display the MOTD when an explicit command is run
from Guilhem Moulin
- Check curve25519 shared secret isn't zero
- dropbear was updated to upstream version 2015.68
- Reduce local data copying for improved efficiency.
Measured 30% increase in throughput for connections to
localhost
- Forwarded TCP ports connect asynchronously and try all
available addresses (IPv4, IPv6, round robin DNS)
- Fix all compile warnings, many patches from Gaël
Portay Note that configure with -Werror may not be
successful on some platforms (OS X) and some
configuration options may still result in unused
variable warnings.
- Use TCP Fast Open on Linux if available. Saves a round
trip at connection to hosts that have previously been
connected. Needs a recent Linux kernel and possibly
'sysctl -w net.ipv4.tcp_fastopen=3' Client side is
disabled by default pending further compatibility
testing with networks and systems.
- Increase maximum command length to 9000 bytes
- Free memory before exiting, patch from Thorsten
Horstmann. Useful for Dropbear ports to embedded systems
and for checking memory leaks with valgrind. Only
partially implemented for dbclient. This is disabled by
default, enable with DROPBEAR_CLEANUP in sysoptions.h
- DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends
home directory unless there is a leading slash (~ isn't
treated specially)
- Fix small ECC memory leaks
- Tighten validation of Diffie-Hellman parameters, from
Florent Daigniere of Matta Consulting. Odds of bad
values are around 2**-512 -- improbable.
- Twofish-ctr cipher is supported though disabled by
default
- Fix pre-authentication timeout when waiting for client
SSH-2.0 banner, thanks to CL Ouyang
- Fix NULL pointer crash with restrictions in
authorized_keys without a command, patch from Guilhem
Moulin
- Ensure authentication timeout is handled while reading
the initial banner, thanks to CL Ouyang for finding it.
- Fix NULL pointer crash when handling bad ECC keys. Found
by afl-fuzz
- dropbear was updated to upstream version 2015.67
- Call fsync() after generating private keys to ensure
they aren't lost if a reboot occurs. Thanks to Peter
Korsgaard
- Disable non-delayed zlib compression by default on the
server. Can be enabled if required for old clients with
DROPBEAR_SERVER_DELAY_ZLIB
- Default client key path ~/.ssh/id_dropbear
- Prefer stronger algorithms by default, from Fedor
Brunner. AES256 over 3DES Diffie-hellman group14 over
group1
- Add option to disable CBC ciphers.
- Disable twofish in default options.h
- Enable sha2 HMAC algorithms by default, the code was
already required for ECC key exchange. sha1 is the first
preference still for performance.
- Fix installing dropbear.8 in a separate build directory,
from Like Ma
- Allow configure to succeed if libtomcrypt/libtommath are
missing, from Elan Ruusamäe
- Don't crash if ssh-agent provides an unknown type of
key. From Catalin Patulea
- Minor bug fixes, a few issues found by Coverity scan
- dropbear was updated to upstream version 2014.66
- Use the same keepalive handling behaviour as OpenSSH.
This will work better with some SSH implementations that
have different behaviour with unknown message types.
- Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a
reply to our own keepalive message
- Set $SSH_CLIENT to keep bash happy, patch from Ryan
Cleere
- Fix wtmp which broke since 2013.62, patch from Whoopie
- dropbear was updated to upstream version 2014.65
- Fix 2014.64 regression, server session hang on exit with
scp (and probably others), thanks to NiLuJe for tracking
it down
- Fix 2014.64 regression, clock_gettime() error handling
which broke on older Linux kernels, reported by NiLuJe
- Fix 2014.64 regression, writev() could occassionally
fail with EAGAIN which wasn't caught
- Avoid error message when trying to set QoS on
proxycommand or multihop pipes
- Use /usr/bin/xauth, thanks to Mike Frysinger
- Don't exit the client if the local user entry can't be
found, thanks to iquaba
- added missing systemd entries for
dropbear-keygen.service
- dropbear was updated to upstream version 2014.64
- Fix compiling with ECDSA and DSS disabled
- Don't exit abruptly if too many outgoing packets are
queued for writev(). Patch thanks to Ronny Meeus
- The -K keepalive option now behaves more like OpenSSH's
'ServerAliveInterval'. If no response is received after
3 keepalives then the session is terminated. This will
close connections faster than waiting for a TCP timeout.
- Rework TCP priority setting. New settings are if
(connecting || ptys || x11) tos = LOWDELAY else if
(tcp_forwards) tos = 0 else tos = BULK Thanks to Catalin
Patulea for the suggestion.
- Improve handling of many concurrent new TCP forwarded
connections, should now be able to handle as many as
MAX_CHANNELS. Thanks to Eduardo Silva for reporting and
investigating it.
- Make sure that exit messages from the client are
printed, regression in 2013.57
- Use monotonic clock where available, timeouts won't be
affected by system time changes
- Add -V for version
- dropbear was updated regular init script to also create
ECDSA keys
- update to upstream version 2014.63
- Fix ~. to terminate a client interactive session after
waking a laptop from sleep.
- Changed port separator syntax again, now using
host^port. This is because IPv6 link-local addresses use
%. Reported by Gui Iribarren
- Avoid constantly relinking dropbearmulti target, fix
'make install' for multi target, thanks to Mike
Frysinger
- Avoid getting stuck in a loop writing huge key files,
reported by Bruno Thomsen
- Don't link dropbearkey or dropbearconvert to libz or
libutil, thanks to Nicolas Boos
- Fix linking -lcrypt on systems without /usr/lib, thanks
to Nicolas Boos
- Avoid crash on exit due to cleaned up keys before last
packets are sent, debugged by Ronald Wahl
- Fix a race condition in rekeying where Dropbear would
exit if it received a still-in-flight packet after
initiating rekeying. Reported by Oliver Metz. This is a
longstanding bug but is triggered more easily since
2013.57
- [...]
- dropbear was updated service files and activated
building of ecdsa keys
- only package the old init service in distributions
without systemd
- imported upstream version 2013.62
- Disable 'interactive' QoS connection options when a
connection doesn't have a PTY (eg scp, rsync). Thanks to
Catalin Patulea for the patch.
- Log when a hostkey is generated with -R, fix some bugs
in handling server hostkey commandline options
- Fix crash in Dropbearconvert and 521 bit key, reported
by NiLuJe
- Update config.guess and config.sub again
- ECC (elliptic curve) support. Supports ECDSA hostkeys
(requires new keys to be generated) and ECDH for setting
up encryption keys (no intervention required). This is
significantly faster.
- [email protected] support for setting up
encryption keys. This is another elliptic curve mode
with less potential of NSA interference in algorithm
parameters. curve25519-donna code thanks to Adam Langley
- -R option to automatically generate hostkeys. This is
recommended for embedded platforms since it allows the
system random number device /dev/urandom a longer
startup time to generate a secure seed before the
hostkey is required.
- Compile fixes for old vendor compilers like Tru64 from
Daniel Richard G.
- Make authorized_keys handling more robust, don't exit
encountering malformed lines. Thanks to Lorin Hochstein
and Mark Stillwell"
);
script_set_attribute(
attribute:"see_also",
value:"https://bugzilla.opensuse.org/show_bug.cgi?id=970633"
);
script_set_attribute(
attribute:"see_also",
value:"https://github.com/robotframework/SSHLibrary/issues/128"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected dropbear packages."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:dropbear");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:dropbear-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:dropbear-debugsource");
script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:13.1");
script_set_attribute(attribute:"patch_publication_date", value:"2016/03/24");
script_set_attribute(attribute:"plugin_publication_date", value:"2016/03/25");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2016-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"SuSE Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE13\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "13.1", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);
flag = 0;
if ( rpm_check(release:"SUSE13.1", reference:"dropbear-2016.72-2.7.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"dropbear-debuginfo-2016.72-2.7.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"dropbear-debugsource-2016.72-2.7.1") ) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "dropbear / dropbear-debuginfo / dropbear-debugsource");
}
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
EPSS
Percentile
90.7%