CVE-Katalog

CVE-2026-3706

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verifica

[CVE-Katalog]

Schweregrad
Medium · CVSS 6.3
Published
Source
[NVD] · [CVE record]
EPSS
0.19% · Oct 22, 2026

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is considered difficult. The actual existence of this vulnerability is currently in question. Patch name: fdec3c90a15447bd538641d85e5a3e3ac981011d. To fix this issue, it is recommended to deploy a patch. The project maintainer explains: "Signature Malleability is not exploitable in SSH protocol. (...) [A] PoC doesn't exist for SSH implementation, but rather it's against the internal API."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandropbearsid2026.94-1fixed
Debiandropbearforky2026.94-1fixed
Debiandropbeartrixie2025.89-1~deb13u1vulnerable
Debiandropbeartrixie-security2025.89-1~deb13u1vulnerable
Debiandropbearbookworm2022.83-1+deb12u3vulnerable
CpedropbearNot reportedNot reportedvulnerable
Ubuntudropbear16.042014.65-1ubuntu2vulnerable
Ubuntudropbear16.042015.68-1vulnerable
Ubuntudropbear16.042015.70-1vulnerable
Ubuntudropbear16.042015.71-1vulnerable
Ubuntudropbear16.042016.72-1vulnerable
Ubuntudropbearpro2019.78-2build1vulnerable
Ubuntudropbearpro2019.78-2ubuntu0.1~esm1vulnerable
Ubuntudropbear22.042020.81-3vulnerable
Ubuntudropbear22.042020.81-4vulnerable
Ubuntudropbear22.042020.81-5vulnerable
Ubuntudropbear22.042020.81-5ubuntu0.1vulnerable
Ubuntudropbear24.042022.83-2vulnerable
Ubuntudropbear24.042022.83-3vulnerable
Ubuntudropbear24.042022.83-4vulnerable
Ubuntudropbear25.102024.86-2vulnerable
Ubuntudropbear25.102025.88-2vulnerable
Ubuntudropbear26.102025.89-1vulnerable
Ubuntudropbear26.102026.91-1vulnerable
Ubuntudropbear26.102026.92-1vulnerable
Ubuntudropbear26.102026.94-1vulnerable
Ubuntudropbear26.102026.94-1ubuntu1vulnerable
Ubuntudropbear26.042025.88-2vulnerable
Ubuntudropbear26.042025.89-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandropbearsourcesid2026.90-1unimportantNot reported[1130870]
Debiandropbearsourceforky2026.90-1unimportantNot reported[1130870]
Debiandropbearsourcetrixie(unfixed)unimportantNot reported[1130870]
Debiandropbearsourcebookworm(unfixed)unimportantNot reported[1130870]

[Debian bug #1130870]

OpenFactory catalog packages

Die Paketzuordnung läuft.

[Debian 12 (Bookworm)]

  • [dropbear]Unbekannt
    Details (2)

    • 2022.83-1+deb12u3 · all · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

    • 2022.83-1+deb12u3 · all · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

  • [dropbear-bin]Unbekannt

    Quellpaket: [dropbear]

    Details (2)

    • 2022.83-1+deb12u3 · amd64 · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

    • 2022.83-1+deb12u3 · arm64 · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

  • [dropbear-initramfs]Unbekannt

    Quellpaket: [dropbear]

    Details (2)

    • 2022.83-1+deb12u3 · all · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

    • 2022.83-1+deb12u3 · all · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

  • [dropbear-run]Unbekannt

    Quellpaket: [dropbear]

    Details (2)

    • 2022.83-1+deb12u3 · all · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

    • 2022.83-1+deb12u3 · all · bookworm

      Betroffen

      nvd · dropbear · debian · bookworm; nvd · dropbear · debian · 12

[Debian 13 (Trixie)]

  • [dropbear]Unbekannt
    Details (4)

    • 2025.89-1~deb13u1 · all · trixie

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · all · trixie

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · all · trixie-security

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · all · trixie-security

      Betroffen

      nvd · dropbear · debian · 13

  • [dropbear-bin]Unbekannt

    Quellpaket: [dropbear]

    Details (4)

    • 2025.89-1~deb13u1 · amd64 · trixie

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · arm64 · trixie

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · amd64 · trixie-security

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · arm64 · trixie-security

      Betroffen

      nvd · dropbear · debian · 13

  • [dropbear-initramfs]Unbekannt

    Quellpaket: [dropbear]

    Details (4)

    • 2025.89-1~deb13u1 · all · trixie

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · all · trixie

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · all · trixie-security

      Betroffen

      nvd · dropbear · debian · 13

    • 2025.89-1~deb13u1 · all · trixie-security

      Betroffen

      nvd · dropbear · debian · 13

Beobachtet:

Referenzen

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]