Vulnerability Details CVE-2019-12953
Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.2%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2019-12953
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2011.54
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2012.54
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2012.55
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2013.56
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2013.57
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2013.58
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2013.59
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2013.60
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2013.61
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2013.62
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2014.63
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2014.64
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2014.65
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2014.66
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2015.67
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2015.68
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2015.69
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2015.70
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2015.71
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2016.72
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2016.73
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2016.74
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2017.75
-
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:2018.76