/ 
Net-Dropbear-0.13
River stage zero No dependents
ā­ Starred 1 GitHub stars
Security Advisories (3)
CVE-2025-40913 (2025-07-16)

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::DropbearĀ embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

CVE-2020-36254 (2021-02-25)

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.

CVE-2019-17362 (2019-10-09)

In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.

Changes for version 0.13 - 2020-03-21

  • Improve tests to avoid infinte hangs on bad tests
  • Handle newer versions of openssh that print extra information on some errors

Modules

Net::Dropbear
Use Dropbear SSH inside of perl
Net::Dropbear::SSH
Embed and control a Dropbear SSH client inside of perl (Not implemented yet)
Net::Dropbear::SSHd
Embed and control a Dropbear SSH server inside of perl
Net::Dropbear::XS
XS interface to Dropbear
Net::Dropbear::XS::AuthState
Manage the authentication information of a user's login attempt.
Net::Dropbear::XS::SessionAccept
Manage how a command session should be handled by Dropbear.

Other files