CVE-2017-2659

CVE-2017-2659 describes an information leakage vulnerability in Dropbear SSH versions prior to 2013.59 when GSSAPI is enabled. An attacker can determine the validity of a username by observing whether GSSAPI authentication failures contribute to the maximum allowed password attempts. This vulnerability has a CVSS v3 score of 7.5 (High), indicating that it is easily exploitable over the network with no user interaction, potentially leading to information disclosure. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.