ALPINE-CVE-2020-36254

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2020-36254
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2020-36254.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2020-36254
Upstream
Published
2021-02-25T09:15:13.037Z
Modified
2026-03-09T01:19:13.596275Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.

References

Affected packages

Alpine:v3.10 / dropbear

Package

Name
dropbear
Purl
pkg:apk/alpine/dropbear?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2019.78-r1

Affected versions

0.*
0.52-r0
0.52-r1
0.52-r2
0.52-r3
0.52-r4
0.53.1-r0
0.53.1-r1
2012.*
2012.55-r0
2013.*
2013.58-r0
2014.*
2014.63-r0
2014.65-r0
2014.66-r0
2014.66-r1
2015.*
2015.67-r0
2015.68-r0
2015.68-r1
2015.68-r2
2015.70-r2
2015.71-r0
2015.71-r1
2016.*
2016.73-r0
2016.74-r0
2016.74-r1
2017.*
2017.75-r0
2017.75-r1
2018.*
2018.76-r0
2018.76-r1
2018.76-r2
2019.*
2019.78-r0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2020-36254.json"

Alpine:v3.11 / dropbear

Package

Name
dropbear
Purl
pkg:apk/alpine/dropbear?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2019.78-r1

Affected versions

0.*
0.52-r0
0.52-r1
0.52-r2
0.52-r3
0.52-r4
0.53.1-r0
0.53.1-r1
2012.*
2012.55-r0
2013.*
2013.58-r0
2014.*
2014.63-r0
2014.65-r0
2014.66-r0
2014.66-r1
2015.*
2015.67-r0
2015.68-r0
2015.68-r1
2015.68-r2
2015.70-r2
2015.71-r0
2015.71-r1
2016.*
2016.73-r0
2016.74-r0
2016.74-r1
2017.*
2017.75-r0
2017.75-r1
2018.*
2018.76-r0
2018.76-r1
2018.76-r2
2019.*
2019.78-r0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2020-36254.json"

Alpine:v3.12 / dropbear

Package

Name
dropbear
Purl
pkg:apk/alpine/dropbear?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2019.78-r1

Affected versions

0.*
0.52-r0
0.52-r1
0.52-r2
0.52-r3
0.52-r4
0.53.1-r0
0.53.1-r1
2012.*
2012.55-r0
2013.*
2013.58-r0
2014.*
2014.63-r0
2014.65-r0
2014.66-r0
2014.66-r1
2015.*
2015.67-r0
2015.68-r0
2015.68-r1
2015.68-r2
2015.70-r2
2015.71-r0
2015.71-r1
2016.*
2016.73-r0
2016.74-r0
2016.74-r1
2017.*
2017.75-r0
2017.75-r1
2018.*
2018.76-r0
2018.76-r1
2018.76-r2
2019.*
2019.78-r0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2020-36254.json"