CVE-2016-3116 describes a CRLF injection vulnerability in Dropbear SSH versions prior to 2016.72. This flaw allows remote authenticated users to bypass shell-command restrictions by injecting crafted X11 forwarding data. With a CVSS score of 6.4 (Medium), it presents a low-complexity network attack that can lead to limited confidentiality and integrity impacts. While there is an ExploitDB entry for command injection related to Dropbear SSH 2015.71, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage for this specific CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2015.71CPE matchmatch criteria | cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.