CVE-2017-9079: Debian Linux

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.

Affected products

• Debian Debian Linux: version 8.0 only
• Dropbear SSH Project Dropbear SSH: before 2017.75 (fixed in 2017.75)

Published 2017-05-19. Last modified 2026-06-17.