CVE-2022-31124
2 advisories.
PyPI/openssh-key-parser CVE-2022-31124: high 7.7, EPSS 1.33%
Possible leak of key's raw field if declared length is incorrect
Action: Upgrade openssh-key-parser to 0.0.6 or later.
pip install openssh-key-parser==0.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.6 | - |
Fixed versions
| 0.0.6 |
Sources
- osv: GHSA-hm37-9xh2-q499
- https://github.com/scottcwang/openssh_key_parser/security/advisories/GHSA-hm37-9xh2-q499
- https://nvd.nist.gov/vuln/detail/CVE-2022-31124
- https://github.com/scottcwang/openssh_key_parser/pull/5
- https://github.com/scottcwang/openssh_key_parser/commit/26e0a471e9fdb23e635bc3014cf4cbd2323a08d3
- https://github.com/scottcwang/openssh_key_parser/commit/274447f91b4037b7050ae634879b657554523b39
- https://github.com/scottcwang/openssh_key_parser/commit/d5b53b4b7e76c5b666fc657019dbf864fb04076c
- https://github.com/pypa/advisory-database/tree/main/vulns/openssh-key-parser/PYSEC-2022-233.yaml
- https://github.com/scottcwang/openssh_key_parser
CVE-2022-31124 · published · modified · JSON
PyPI/openssh-key-parser CVE-2022-31124: unknown, EPSS 1.33%
openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key files. In versions prior to 0.0.6 if a field of a key is shorter than it is dec
Action: Upgrade openssh-key-parser to 0.0.6 or later.
pip install openssh-key-parser==0.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.6 | - |
Fixed versions
| 0.0.6 |
Sources
- osv: PYSEC-2022-233
- https://github.com/scottcwang/openssh_key_parser/commit/d5b53b4b7e76c5b666fc657019dbf864fb04076c
- https://github.com/scottcwang/openssh_key_parser/security/advisories/GHSA-hm37-9xh2-q499
- https://github.com/scottcwang/openssh_key_parser/pull/5
- https://github.com/scottcwang/openssh_key_parser/commit/26e0a471e9fdb23e635bc3014cf4cbd2323a08d3
- https://github.com/scottcwang/openssh_key_parser/commit/274447f91b4037b7050ae634879b657554523b39
CVE-2022-31124 · published · modified · JSON