CVE-2016-3116: Dropbear SSH Project Dropbear SSH

Medium severity, CVSS 6.4. EPSS: 19.3% chance of exploitation in the next 30 days.

CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data.

Affected products

• Dropbear SSH Project Dropbear SSH: up to and including 2015.71

Published 2016-03-22. Last modified 2026-06-17.