Description
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow.
Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ATRODO | Net::Dropbear | 0.01 – ≤ 0.16 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | samba +1 | No fix yet | — |
| Azure Linux 3 | tcl | 8.6.13-2 | — |