Lucene search
K

11 matches found

Github Security Blog
Github Security Blog
added 2019/08/19 11:45 p.m.22 views

Undirectional routing wasn't respected in some cases in Mitogen

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetica...

9.8CVSS9.4AI score0.00433EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2019/08/19 11:45 p.m.0 views

GHSA-8RF6-W2MX-4XJH Undirectional routing wasn't respected in some cases in Mitogen

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetica...

9.8CVSS7.2AI score0.00433EPSS
Exploits0References5
Veracode
Veracode
added 2019/08/19 6:49 a.m.14 views

Unidirectional-Routing Misconfiguration

mitogen contains a unidirectional-routing misconfiguration. The misconfiguration causes the unidirectional-routing protection mechanism to be dropped when a child process is initiated by another child. Ansible extension is not affected...

9.8CVSS3.1AI score0.00433EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2019/08/18 8:15 p.m.8 views

CVE-2019-15149

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetica...

9.8CVSS9.4AI score0.00433EPSS
Exploits0References2
OSV
OSV
added 2019/08/18 8:15 p.m.4 views

PYSEC-2019-34

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

5.9AI score
Exploits0References2
PyPA
PyPA
added 2019/08/18 8:15 p.m.4 views

PYSEC-2019-104

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

9.8CVSS7.1AI score0.00433EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2019/08/18 8:15 p.m.0 views

PYSEC-2019-104

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

9.8CVSS5.9AI score0.00433EPSS
Exploits0References3
Prion
Prion
added 2019/08/18 8:15 p.m.9 views

Design/Logic Flaw

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

6.8CVSS9.4AI score0.00433EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/08/18 7:56 p.m.52 views

CVE-2019-15149

CVE-2019-15149 affects Mitogen's core.py in versions before 0.2.8, where a typo drops the unidirectional-routing protection when a child is initiated by another child; the Ansible extension is unaffected. Public details in the connected documents confirm the root cause (typo in core.py) and the i...

9.8CVSS9.3AI score0.00433EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/18 7:56 p.m.13 views

CVE-2019-15149

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetica...

9.5AI score0.00433EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/08/18 12:0 a.m.2 views

PT-2019-14014 · Mitogen · Mitogen

Name of the Vulnerable Software and Affected Versions: Mitogen versions prior to 0.2.8 Description: The issue is related to a typo in core.py that affects the unidirectional-routing protection mechanism when a child is initiated by another child. The Ansible extension is not affected. The vendor...

9.8CVSS9.6AI score0.00433EPSS
Exploits0References10
Rows per page
Query Builder