GHSA-CQXX-66WH-8PJW Improper Removal of Sensitive Information Before Storage or Transfer in irrd

IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perform a brute-force search for the clear-text passphrase, and use these to make unauthorised changes to affected IRR...

Improper Removal of Sensitive Information Before Storage or Transfer in irrd

IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perform a brute-force search for the clear-text passphrase, and use these to make unauthorised changes to affected IRR...

CVE-2022-24798

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perfo...

PYSEC-2022-178

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perfo...

CVE-2022-24798

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to "mntner" objects and database exports. This may have allowed adversaries to retrieve some of these hashes,...

CVE-2022-24798 Insufficient password hash filtering in some IRRd queries and exports

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perfo...

CVE-2022-24798 Insufficient password hash filtering in some IRRd queries and exports

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perfo...

CVE-2022-24798 Insufficient password hash filtering in some IRRd queries and exports

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perfo...

CVE-2022-24798: Improper Removal of Sensitive Information Before Storage or Transfer

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to mntner objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perfo...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by unknown CVE via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: unknown CVE Source advisory:...

carml (19.1.0), cyclone (>=1.2.0, <=1.3.0) +9 more potentially affected by CVE-2019-9512 +2 more via twisted (>=19.2.0, <=19.7.0)

twisted PYPI version =19.2.0, =1.2.0, =4.0.0, =1.0.0, =1.5.1, =0.1.0a23, =1.1.0, =0.1.0, =1.0.0, =0.2.0, =0.2.1 Source cves: CVE-2019-9512, CVE-2019-9514, CVE-2019-9515 Source advisory: GHSA-32GV-6CF3-WCMQ...

carml (19.1.0), cyclone (>=1.2.0, <=1.3.0) +9 more potentially affected by unknown CVE via twisted (>=19.2.0, <=19.7.0)

twisted PYPI version =19.2.0, =1.2.0, =4.0.0, =1.0.0, =1.5.1, =0.1.0a23, =1.1.0, =0.1.0, =1.0.0, =0.2.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-32GV-6CF3-WCMQ...

bootleg (1.1.0), cyberbrain (0.2.3) +6 more potentially affected by unknown CVE via ujson (4.1.0)

ujson PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - bootleg 1.1.0 - cyberbrain 0.2.3 - dataplate =0.2.0, =4.2.0, =0.7.0, =0.3.3, =0.2.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:OSV-2021-955...

cyclone (>=1.2.0, <=1.3.0), irrd (>=4.0.1, <=4.0.8) +3 more potentially affected by CVE-2020-10108 via twisted (19.2.1)

twisted PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cyclone =1.2.0, =4.0.1, =1.0.0, =0.1.0a23, =0.1.0, =0.2.1 Source cves: CVE-2020-10108 Source advisory: OSV:GHSA-H96W-MMRF-2H6V...

irrd (4.0.0), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2020-10108 via twisted (19.2.0)

twisted PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - irrd 4.0.0 - neural-mmo =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2020-10108 Source advisory: OSV:GHSA-H96W-MMRF-2H6V...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by CVE-2020-10109 via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: CVE-2020-10109 Source advisory...

irrd (4.0.0), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2020-10109 via twisted (19.2.0)

twisted PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - irrd 4.0.0 - neural-mmo =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2020-10109 Source advisory: OSV:GHSA-P5XH-VX83-MXCJ...

irrd (4.0.0), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2020-10109 via twisted (19.2.0)

twisted PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - irrd 4.0.0 - neural-mmo =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2020-10109 Source advisory: OSV:PYSEC-2020-260...

cyclone (>=1.2.0, <=1.3.0), irrd (>=4.0.1, <=4.0.8) +3 more potentially affected by CVE-2020-10109 via twisted (19.2.1)

twisted PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cyclone =1.2.0, =4.0.1, =1.0.0, =0.1.0a23, =0.1.0, =0.2.1 Source cves: CVE-2020-10109 Source advisory: OSV:PYSEC-2020-260...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by CVE-2020-10109 via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: CVE-2020-10109 Source advisory...