CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.

• CWE-20

• http://www.openwall.com/lists/oss-security/2016/09/15/2Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/92974Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1376353Issue Tracking
• https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcbIssue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201702-23Patch, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2024/Aug/35
• http://www.openwall.com/lists/oss-security/2016/09/15/2Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/92974Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1376353Issue Tracking
• https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcbIssue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201702-23Patch, Third Party Advisory, VDB Entry

Published

Mar 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7399scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x th…
• CVE-2016-7400Multiple SQL injection vulnerabilities in Exponent CMS befor…
• CVE-2016-7401The cookie parsing code in Django before 1.8.15 and 1.9.x be…
• CVE-2016-7402SAP ASE 16.0 SP02 PL03 and prior versions allow attackers wh…
• CVE-2016-7404OpenStack Magnum passes OpenStack credentials into the Heat …
• CVE-2016-7405The qstr method in the PDO driver in the ADOdb Library for P…
• CVE-2016-7407The dropbearconvert command in Dropbear SSH before 2016.74 a…
• CVE-2016-7408The dbclient in Dropbear SSH before 2016.74 allows remote at…
• CVE-2016-7409The dbclient and server in Dropbear SSH before 2016.74, when…
• CVE-2016-7410The _dwarf_read_loc_section function in dwarf_loc.c in libdw…5.5
• CVE-2016-7411ext/standard/var_unserializer.re in PHP before 5.6.26 mishan…
• CVE-2016-7412ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and …