dropbear ssh
dropbear_sshcounted 2026-10-08 03:20 UTC
As of 2026-10-08, 13 143 hosts ran dropbear ssh with at least one known CVE on a service open at their latest check, across 27 versions with CVEs; 20 distinct CVEs.
Known CVEs on hosts running it
13 143hosts with known CVEs
20distinct CVEs
27versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 3 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 2012.55 | 2 801 | 15 |
| 0.46 | 2 017 | 17 |
| 0.52 | 1 682 | 15 |
| 2014.63 | 1 490 | 12 |
| 0.51 | 1 095 | 14 |
| 2016.74 | 719 | 7 |
| 0.50 | 683 | 14 |
| 0.53.1 | 639 | 15 |
| 0.48 | 581 | 15 |
| 2019.78 | 515 | 3 |
| 2011.54 | 404 | 16 |
| 0.49 | 217 | 14 |
| 0.53 | 105 | 15 |
| 0.45 | 54 | 17 |
| 2020.81 | 30 | 2 |
| 2018.76 | 28 | 5 |
| 2013.56 | 21 | 15 |
| 2015.67 | 19 | 12 |
| 2017.75 | 15 | 5 |
| 2020.80 | 7 | 2 |
| 2013.59 | 5 | 12 |
| 2022.82 | 5 | 1 |
| 0.44 | 4 | 17 |
| 2015.71 | 4 | 12 |
| 0.40 | 1 | 18 |
| 0.43 | 1 | 17 |
| 2020.79 | 1 | 2 |
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2023-48795 MEDIUM 5.9 | 13 143 |
| CVE-2021-36369 HIGH 7.5 | 13 138 |
| CVE-2020-36254 HIGH 8.1 | 13 100 |
| CVE-2018-15599 MEDIUM 5.3 | 12 585 |
| CVE-2017-9078 HIGH 8.8 | 12 542 |
| CVE-2017-9079 MEDIUM 4.7 | 12 542 |
| CVE-2016-7406 CRITICAL 9.8 | 11 823 |
| CVE-2016-7407 CRITICAL 9.8 | 11 823 |
| CVE-2016-7408 HIGH 8.8 | 11 823 |
| CVE-2016-3116 MEDIUM 6.4 | 11 823 |
| CVE-2016-7409 MEDIUM 5.5 | 11 823 |
| CVE-2017-2659 HIGH 7.5 | 10 305 |
| CVE-2013-4421 MEDIUM 5.0 | 10 305 |
| CVE-2013-4434 MEDIUM 5.0 | 10 305 |
| CVE-2019-12953 MEDIUM 5.3 | 5 506 |
| CVE-2012-0920 HIGH 7.1 | 2 830 |
| CVE-2007-1099 HIGH 7.5 | 2 658 |
| CVE-2005-4178 MEDIUM 6.5 | 2 077 |
| CVE-2006-1206 MEDIUM 5.0 | 2 077 |
| CVE-2004-2486 HIGH 7.5 | 1 |
Hosts: matches on services open at each host's latest check, over every version.