pyplanet (>=0.6.0rc1, <=0.6.0) potentially affected by CVE-2023-46445 via asyncssh (1.12.2)

asyncssh PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.6.0rc1, =0.6.0 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

pyplanet (>=0.5.0, <=0.5.2) potentially affected by CVE-2023-46445 via asyncssh (1.11.0)

asyncssh PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.5.0, =0.5.2 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

pyplanet (>=0.1.5, <=0.3.3) potentially affected by CVE-2023-46445 via asyncssh (1.10.0)

asyncssh PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.1.5, =0.3.3 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

netdev (>=0.9.1, <=0.9.3), pyplanet (>=0.7.0rc1, <=0.11.12) +2 more potentially affected by CVE-2023-46445 via asyncssh (1.18.0)

asyncssh PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - netdev =0.9.1, =0.7.0rc1, =0.0.1, =0.2.1 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

pyplanet (>=0.4.0, <=0.4.5) potentially affected by CVE-2023-46445 via asyncssh (1.10.1)

asyncssh PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.4.0, =0.4.5 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

pyplanet (>=0.5.3, <=0.5.4) potentially affected by CVE-2023-46445 via asyncssh (1.11.1)

asyncssh PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.5.3, =0.5.4 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

pitcrew (>=0.0.1, <=0.0.3) potentially affected by CVE-2023-46445 via asyncssh (1.16.1)

asyncssh PYPI version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pitcrew =0.0.1, =0.0.3 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

pyplanet (>=0.0.1, <=0.1.4) potentially affected by CVE-2023-46445 via asyncssh (1.9.0)

asyncssh PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.0.1, =0.1.4 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

aioasuswrt (>=1.1.20, <=1.1.21) potentially affected by CVE-2023-46445 via asyncssh (1.15.0)

asyncssh PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - aioasuswrt =1.1.20, =1.1.21 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

pyplanet (0.6.1a1) potentially affected by CVE-2023-46445 via asyncssh (1.13.2)

asyncssh PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet 0.6.1a1 Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

aioasuswrt (>=1.2.7, <=1.3.3), aiosftp (>=0.0.1, <=0.3.0) +36 more potentially affected by CVE-2023-46445 via asyncssh (>=2.0.1, <=2.14.0)

asyncssh PYPI version =2.0.1, =1.2.7, =0.0.1, =0.6.0, =0.3.0, =1.2.1, =2.9.0, =0.4.0, =0.0.4, =0.35.0, =3.1.1, =0.6.5, =0.8.0a7, =2.8.1, =0.1.0, =0.4.54 and more Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

PYSEC-2023-237

An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack...

UBUNTU-CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

UBUNTU-CVE-2023-46446

An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."...

pyplanet (0.6.1a1) potentially affected by CVE-2023-46446 via asyncssh (1.13.2)

asyncssh PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet 0.6.1a1 Source cves: CVE-2023-46446 Source advisory: OSV:PYSEC-2023-239...

CVE-2023-46446

An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."...

aioasuswrt (>=1.1.20, <=1.1.21) potentially affected by CVE-2023-46446 via asyncssh (1.15.0)

asyncssh PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - aioasuswrt =1.1.20, =1.1.21 Source cves: CVE-2023-46446 Source advisory: OSV:PYSEC-2023-239...

PYSEC-2023-239

An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation...

aioasuswrt (>=1.2.7, <=1.3.3), aiosftp (>=0.0.1, <=0.3.0) +36 more potentially affected by CVE-2023-46446 via asyncssh (>=2.0.1, <=2.14.0)

asyncssh PYPI version =2.0.1, =1.2.7, =0.0.1, =0.6.0, =0.3.0, =1.2.1, =2.9.0, =0.4.0, =0.0.4, =0.35.0, =3.1.1, =0.6.5, =0.8.0a7, =2.8.1, =0.1.0, =0.4.54 and more Source cves: CVE-2023-46446 Source advisory: OSV:PYSEC-2023-239...