/ 
Net-Dropbear-0.04
River stage zero No dependents
ā­ Starred 1 GitHub stars
Security Advisories (2)
CVE-2025-40913 (2025-07-16)

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::DropbearĀ embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

CVE-2016-6129 (2017-02-13)

The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA signatures or public certificates by leveraging a Bleichenbacher signature forgery attack.

Changes for version 0.04 - 2015-11-06

  • Drop the min perl requirement to 5.8.8
  • Use the c/cpp/ld flags from perl to compile dropbear
  • Rename "kill" to "stop"

Modules

Net::Dropbear
Use Dropbear SSH inside of perl
Net::Dropbear::SSH
Embed and control a Dropbear SSH client inside of perl (Not implemented yet)
Net::Dropbear::SSHd
Embed and control a Dropbear SSH server inside of perl
Net::Dropbear::XS
XS interface to Dropbear
Net::Dropbear::XS::AuthState
Manage the authentication information of a user's login attempt.
Net::Dropbear::XS::SessionAccept
Manage how a command session should be handled by Dropbear.

Other files