core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetical other factors, i.e., an affected use case within a library caller, and a bug in the message receiver policy code that led to reliance on this extra protection mechanism
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-08-18T19:56:18

Updated: 2024-08-05T00:42:03.692Z

Reserved: 2019-08-18T00:00:00

Link: CVE-2019-15149

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-08-18T20:15:09.220

Modified: 2024-11-21T04:28:10.043

Link: CVE-2019-15149

cve-icon Redhat

No data.