pysec - pysec-2019-1

pysec-2019-1

Vulnerability from pysec

Published

2019-02-04 21:29

Modified

2019-02-15 15:00

Details

aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can result in Denial of Service, Other. This attack appears to be exploitable via Remote. A crafted stanza can be sent to an application which uses the vulnerable components to either inject data in a different context or cause the application to reconnect (potentially losing data). This vulnerability appears to have been fixed in 0.10.3.

Impacted products

Name	purl
aioxmpp	pkg:pypi/aioxmpp

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "aioxmpp",
        "purl": "pkg:pypi/aioxmpp"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.2",
        "0.3",
        "0.4.0",
        "0.4.1",
        "0.5.0",
        "0.5.1",
        "0.5.2",
        "0.5.3",
        "0.5.4",
        "0.6.0",
        "0.6.1",
        "0.7.0",
        "0.7.1",
        "0.7.2",
        "0.8.0",
        "0.9.0",
        "0.9.1",
        "0.10.0",
        "0.10.1",
        "0.10.2"
      ]
    }
  ],
  "aliases": [
    "CVE-2019-1000007",
    "GHSA-6m9g-jr8c-cqw3"
  ],
  "details": "aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can result in Denial of Service, Other. This attack appears to be exploitable via Remote. A crafted stanza can be sent to an application which uses the vulnerable components to either inject data in a different context or cause the application to reconnect (potentially losing data). This vulnerability appears to have been fixed in 0.10.3.",
  "id": "PYSEC-2019-1",
  "modified": "2019-02-15T15:00:00Z",
  "published": "2019-02-04T21:29:00Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/horazont/aioxmpp/pull/268"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-6m9g-jr8c-cqw3"
    }
  ]
}

ghsa-6m9g-jr8c-cqw3

Vulnerability from github

Published

2020-04-29 17:12

Modified

2024-09-04 19:55

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
8.3 (High) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

Depth counting error in guard() leading to multiple potential security issues in aioxmpp

Details

Impact

Possible remote Denial of Service or Data Injection.

Patches

Patches are available in https://github.com/horazont/aioxmpp/pull/268. They have been backported to the 0.10 release series and 0.10.3 is the first release to contain the fix.

Workarounds

To make the bug exploitable, an error suppressing xso_error_handler is required. By not using xso_error_handlers or not using the suppression function, the vulnerability can be mitigated completely (to our knowledge).

References

The pull request contains a detailed description: https://github.com/horazont/aioxmpp/pull/268

For more information

If you have any questions or comments about this advisory: * Join our chat * Email the maintainer Jonas Schäfer

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "aioxmpp"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2019-1000007"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-237"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-04-29T17:12:16Z",
    "nvd_published_at": "2019-02-04T21:29:00Z",
    "severity": "HIGH"
  },
  "details": "### Impact\nPossible remote Denial of Service or Data Injection.\n\n### Patches\nPatches are available in https://github.com/horazont/aioxmpp/pull/268. They have been backported to the 0.10 release series and 0.10.3 is the first release to contain the fix.\n\n### Workarounds\nTo make the bug exploitable, an error suppressing ``xso_error_handler`` is required. By not using ``xso_error_handlers`` or not using the suppression function, the vulnerability can be mitigated completely (to our knowledge).\n\n### References\nThe pull request contains a detailed description: https://github.com/horazont/aioxmpp/pull/268\n\n### For more information\nIf you have any questions or comments about this advisory:\n* [Join our chat](xmpp:aioxmpp@conference.zombofant.net?join)\n* Email the maintainer [Jonas Sch\u00e4fer](mailto:jonas@wielicki.name)",
  "id": "GHSA-6m9g-jr8c-cqw3",
  "modified": "2024-09-04T19:55:01Z",
  "published": "2020-04-29T17:12:39Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/horazont/aioxmpp/security/advisories/GHSA-6m9g-jr8c-cqw3"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1000007"
    },
    {
      "type": "WEB",
      "url": "https://github.com/horazont/aioxmpp/pull/268"
    },
    {
      "type": "WEB",
      "url": "https://github.com/horazont/aioxmpp/commit/29ff0838a40f58efe30a4bbcea95aa8dab7da475"
    },
    {
      "type": "WEB",
      "url": "https://github.com/horazont/aioxmpp/commit/f151f920f439d97d4103fc11057ed6dc34fe98be"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-6m9g-jr8c-cqw3"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/horazont/aioxmpp"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/aioxmpp/PYSEC-2019-1.yaml"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Depth counting error in guard() leading to multiple potential security issues in aioxmpp"
}

CVE-2019-1000007 (GCVE-0-2019-1000007)

Vulnerability from cvelistv5

Published

2019-02-04 21:00

Modified

2024-08-05 03:00

Severity ?

CWE

Summary

References

URL

Tags

https://github.com/horazont/aioxmpp/pull/268

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:00:19.220Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/horazont/aioxmpp/pull/268"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2019-01-22T00:00:00",
      "datePublic": "2019-01-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can result in Denial of Service, Other. This attack appears to be exploitable via Remote. A crafted stanza can be sent to an application which uses the vulnerable components to either inject data in a different context or cause the application to reconnect (potentially losing data). This vulnerability appears to have been fixed in 0.10.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-04T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/horazont/aioxmpp/pull/268"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "2019-01-22T21:21:10.015889",
          "DATE_REQUESTED": "2019-01-10T18:56:13",
          "ID": "CVE-2019-1000007",
          "REQUESTER": "jonas@wielicki.name",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "aioxmpp version 0.10.2 and earlier contains a Improper Handling of Structural Elements vulnerability in Stanza Parser, rollback during error processing, aioxmpp.xso.model.guard function that can result in Denial of Service, Other. This attack appears to be exploitable via Remote. A crafted stanza can be sent to an application which uses the vulnerable components to either inject data in a different context or cause the application to reconnect (potentially losing data). This vulnerability appears to have been fixed in 0.10.3."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/horazont/aioxmpp/pull/268",
              "refsource": "MISC",
              "url": "https://github.com/horazont/aioxmpp/pull/268"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-1000007",
    "datePublished": "2019-02-04T21:00:00",
    "dateReserved": "2019-01-10T00:00:00",
    "dateUpdated": "2024-08-05T03:00:19.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

pysec-2019-1

Vulnerability from pysec

ghsa-6m9g-jr8c-cqw3

Vulnerability from github

Impact

Patches

Workarounds

References

For more information

CVE-2019-1000007 (GCVE-0-2019-1000007)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature