CVE-2022-24976

Опубликовано: 14 фев. 2022

Источник: nvd

CVSS3: 9.1

CVSS2: 5.8

EPSS Низкий

Описание

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.

Ссылки

https://github.com/atheme/atheme/commit/4e664c75d0b280a052eb8b5e81aa41944e593c52
Patch
Third Party Advisory
https://github.com/atheme/atheme/compare/v7.2.11...v7.2.12
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/01/30/4
Exploit
Mailing List
Third Party Advisory
https://github.com/atheme/atheme/commit/4e664c75d0b280a052eb8b5e81aa41944e593c52
Patch
Third Party Advisory
https://github.com/atheme/atheme/compare/v7.2.11...v7.2.12
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/01/30/4
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:atheme:atheme:*:*:*:*:*:*:*:*

Версия от 7.2.0 (включая) до 7.2.12 (исключая)

EPSS

Процентиль: 35%

0.00144

Низкий

9.1 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2022-24976

CVSS3: 9.1

ubuntu

почти 4 года назад

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.

CVE-2022-24976

CVSS3: 9.1

debian

почти 4 года назад

Atheme IRC Services before 7.2.12, when used in conjunction with InspI ...

openSUSE-SU-2022:10019-1

suse-cvrf

больше 3 лет назад

Security update for atheme

openSUSE-SU-2022:10018-1

suse-cvrf

больше 3 лет назад

Security update for atheme

GHSA-3fv4-6wvg-x83x

github

почти 4 года назад

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.

EPSS

Процентиль: 35%

0.00144

Низкий

9.1 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-287