CVE-2019-12953: Dropbear SSH Project Dropbear SSH

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.

Affected products

• Dropbear SSH Project Dropbear SSH: from 2011.54, up to and including 2018.76

Published 2020-12-30. Last modified 2026-06-17.