Launchpad.net

CVE 2016-7408

The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument.

CVE-2016-7408 (Candidate) is related to these bugs:

Bug #1660672: Security flaws in dropbear prior to v2016.74

Summary				In	Importance	Status
	1660672	Security flaws in dropbear prior to v2016.74		dropbear (Ubuntu)	Undecided	Expired

See the

CVE page on Mitre.org for more details.