tocsin

PyPI/ipa CVE-2019-14867: unknown, EPSS 7.41%

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components

Action: Upgrade ipa to 4.6.7 or later.

pip install ipa==4.6.7
pip install ipa==4.7.4
pip install ipa==4.8.3

Affected

introducedfixedlast affected
4.6.24.6.7-
4.7.04.7.4-
4.8.04.8.3-

Fixed versions

4.6.74.7.44.8.3

Sources

CVE-2019-14867 · published · modified · JSON