Dropbear SSH: Schwachstelle ermöglicht Erlangen von Administratorrechten

Summary

Product

Vulnerabilities 1

• Medium 5.4
  CVE-2025-14282

  Dropbear: privilege escalation via unix domain socket forwardings

  A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some o…

  https://github.com/mkj/dropbear/ dropbear dropbear dropbear Debian Ubuntu Alpine
  Feb 12, 2026

Revision history

1. 2025-12-21 #3

   Neue Updates von Debian aufgenommen

2. 2025-12-17 #2

   Angreifer muss authentisiert sein, PoC aufgenommen

3. 2025-12-16 #1

   Initiale Fassung

References

• Dropbear Release Notes vom 2025-12-16
  https://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2025q4/002390.html
• Debian Security Tracker CVE-2025-14282
  https://security-tracker.debian.org/tracker/CVE-2025-14282
• Ubuntu Security Tracker CVE-2025-14282
  https://ubuntu.com/security/CVE-2025-14282
• Tenable Research CVE-2025-14282 vom 2025-12-17
  https://www.tenable.com/cve/CVE-2025-14282
• PoC CVE-2025-14282 vom 2025-12-17
  https://github.com/turistu/odds-n-ends/blob/main/CVE-2025-14282.md
• Debian Security Advisory DSA-6086 vom 2025-12-19
  https://lists.debian.org/debian-security-announce/2025/msg00252.html