openSUSE Security Update : python-mitmproxy (openSUSE-2019-581)

This update for python-mitmproxy fixes the following issues : The following security vulnerability was fixed : - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed : - Fixed a dependency issue with python-ldap3 boo110145...

openSUSE: Security Advisory for python-mitmproxy (openSUSE-SU-2018:2291-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for python-mitmproxy (moderate)

This update for python-mitmproxy fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed: - Fixed a dependency issue with python-ldap3 boo1101457...

openSUSE Security Update : python-mitmproxy (openSUSE-2018-850)

This update for python-mitmproxy fixes the following issues : The following security vulnerability was fixed : - CVE-2018-14505: Fixed multiple DNS rebinding attacks related to tools/web/app.py boo1102178 The following other issue was fixed : - Fixed a dependency issue with python-ldap3 boo110145...

mitmproxy-escher (1.0.0), mitmproxy-httpolice (0.7.1) potentially affected by CVE-2018-14505 via mitmproxy (3.0.4)

mitmproxy PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher 1.0.0 - mitmproxy-httpolice 0.7.1 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...

padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2018-14505 via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...

sandroid (2.0.0), ui-automation-tools-mbt (>=1.1.1, <=1.3.1) potentially affected by CVE-2018-14505 via mitmproxy (0.17.0)

mitmproxy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - sandroid 2.0.0 - ui-automation-tools-mbt =1.1.1, =1.3.1 Source cves: CVE-2018-14505 Source advisory: OSV:GHSA-6M53-C78Q-7QMG...

mitmproxy-escher (1.0.0), mitmproxy-httpolice (0.7.1) potentially affected by CVE-2018-14505 via mitmproxy (3.0.4)

mitmproxy PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher 1.0.0 - mitmproxy-httpolice 0.7.1 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2018-14505 via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

padsniff (1.1.1) potentially affected by CVE-2018-14505 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2018-14505 Source advisory: OSV:PYSEC-2018-56...

CVE-2018-14505

CVE-2018-14505 affects mitmproxy’s mitmweb (v4.0.3) with DNS rebinding flaws in tools/web/app.py. Documented in multiple advisories (GHSA, OpenSUSE/NASL) as fixed in v4.0.4+; impact described as allowing DNS rebinding attacks. REMEDIATION: upgrade to mitmproxy ≥4.0.4 or apply vendor patches that ...

lyrebird (>=0.10.4, <=0.10.5), mitmproxy-escher (>=0.1.2, <=1.0.0) +5 more potentially affected by CVE-2018-14505 via mitmproxy (>=0.17.0, <=4.0.3)

mitmproxy PYPI version =0.17.0, =0.10.4, =0.1.2, =0.9.0, =1.1.1, =1.3.1 Source cves: CVE-2018-14505 Source advisory: MEND:CVE-2018-14505...