CVE-2017-2659
It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication fail…
Published: 2019-03-20 · CVSS: 5.3 · CVSS 3.0
It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7