PT-2019-20127 · Supybot+1 · Supybot+1

Published 2019-11-16 · Updated 2019-11-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Limnoria versions prior to 2019.11.09 Supybot versions through 2018-05-09

Description The issue allows remote unprivileged attackers to disclose information or possibly have unspecified other impact. This is achieved via the calc and icalc IRC commands in the Math plugin.

Recommendations For Limnoria versions prior to 2019.11.09, update to version 2019.11.09 or later. For Supybot versions through 2018-05-09, consider disabling the Math plugin until a patch is available.

Related Identifiers

PYSEC-2019-32

Affected Products

Limnoria

Supybot

References · 6

• https://lists.fedoraproject.org/archives/list/[e-mail]/message/DRNOUHFEN75QAIKT4Y3HDN3TT5LSIWN2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/5P2AGND54UIJV3WHOYO2YINIXSDGAAPO · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2019-32 · Vendor Advisory
• https://github.com/ProgVal/Limnoria/wiki/math-eval-vulnerability · Note
• https://github.com/ProgVal/Limnoria/commit/3848ae78de45b35c029cc333963d436b9d2f0a35 · Note