Published: 06/07/2022 Updated: 14/07/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 357

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key files. In versions before 0.0.6 if a field of a key is shorter than it is declared to be, the parser raises an error with a message containing the raw field value. An attacker able to modify the declared length of a key's sensitive field can thus expose the raw value of that field. Users are advised to upgrade to version 0.0.6, which no longer includes the raw field value in the error message. There are no known workarounds for this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openssh key parser project openssh key parser

openssh_key_parser Please don't use versions 001 - 005, which are affected by CVE-2022-31124, a High severity vulnerability Upgrade to at least version 006 This repository provides openssh_key, a Python package providing utilities to parse and pack OpenSSH private and public key files It supports parsing and packing keys of all types currently supported by OpenSSH

With this project, I will show you how to use Zenmap and Wireshark to analyze a networks topology, audit systems, and scan for vulenerabilities.

Vulnerability-Scanning With this project, I will show you how to use Zenmap and Wireshark to analyze a networks topology, audit systems, and scan for vulenerabilities Overview Cybersecurity is a broad field with lots of topics to study on yet one of the most important things you can do, is know your network Here we will show you how to utilize simple tools that will help you

CWE-209 https://github.com/scottcwang/openssh_key_parser/commit/d5b53b4b7e76c5b666fc657019dbf864fb04076c https://github.com/scottcwang/openssh_key_parser/security/advisories/GHSA-hm37-9xh2-q499 https://github.com/scottcwang/openssh_key_parser/pull/5 https://github.com/scottcwang/openssh_key_parser/commit/26e0a471e9fdb23e635bc3014cf4cbd2323a08d3 https://github.com/scottcwang/openssh_key_parser/commit/274447f91b4037b7050ae634879b657554523b39 https://nvd.nist.gov https://github.com/scottcwang/openssh_key_parser https://github.com/Lukembou/Vulnerability-Scanning

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-31124

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect