Vulnerabilities

TI-2025-21445 CVE-2025-30095 · GHSA-8vh6-m67f-4h33

VyOS 1.3 through 1.5 (fixed in 1.4.2) or any Debian-based system using dropbear in…

MEDIUM 41

VyOS 1.3 through 1.5 (fixed in 1.4.2) or any Debian-based system using dropbear in combination with live-build has the same Dropbear private host keys across different installations.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00503 Published 2025-03-31 Fixed in 1.4.2, 1.5-stream-2025-Q2 CWE-321

TI-2018-13121 CVE-2018-18556 · GHSA-8jmm-6g59-87gc

A privilege escalation issue was discovered in VyOS 1.1.8.

MEDIUM 58

A privilege escalation issue was discovered in VyOS 1.1.8.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.15411 Published 2018-12-17 No fix listed

TI-2018-13120 CVE-2018-18555 · GHSA-2m72-4x6w-fqpx

A sandbox escape issue was discovered in VyOS 1.1.8.

MEDIUM 46

A sandbox escape issue was discovered in VyOS 1.1.8.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01769 Published 2018-12-17 No fix listed CWE-78

Vulnerabilities

Filters

VyOS 1.3 through 1.5 (fixed in 1.4.2) or any Debian-based system using dropbear in…

A privilege escalation issue was discovered in VyOS 1.1.8.

A sandbox escape issue was discovered in VyOS 1.1.8.