Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade lasso-develUpgrade lasso | May 4, 2022 | Jun 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade lassoUpgrade lasso-debuginfoUpgrade lasso-develUpgrade lasso-python | Jun 24, 2021 | Jun 4, 2021 |
| Amazon_linux | — | Upgrade lasso | Sep 9, 2021 | Jun 2, 2021 |
| Centos_linux | — | Upgrade lasso-develUpgrade python3-lasso-debuginfoUpgrade lasso-pythonUpgrade java-lasso-debuginfoUpgrade perl-lasso-debuginfoUpgrade lasso-debugsourceUpgrade lasso-debuginfoUpgrade lasso | Aug 3, 2021 | Jun 4, 2021 |
| Debian | — | Upgrade lasso | Jun 7, 2021 | Jun 4, 2021 |
| Freebsd | — | Upgrade lasso | Nov 4, 2022 | Jun 1, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade lasso-pythonUpgrade lasso | Sep 16, 2021 | Jun 4, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lassoUpgrade lasso-python | Oct 26, 2021 | Jun 4, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lassoUpgrade lasso-python | Sep 7, 2021 | Jun 4, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade lasso | Sep 24, 2021 | Jun 4, 2021 |
| Oracle Solaris | — | Upgrade library/lasso to version 2.7.0-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jun 4, 2021 |
| Oracle_linux | — | Upgrade lasso-develUpgrade lassoUpgrade lasso-python | Aug 3, 2021 | Jun 1, 2021 |
| Redhat_linux | — | Upgrade java-lasso-debuginfoUpgrade perl-lasso-debuginfoUpgrade lasso-debugsourceUpgrade lasso-debuginfoUpgrade lasso-develNo solution existsUpgrade python3-lasso-debuginfoUpgrade lasso-pythonUpgrade lasso | Aug 3, 2021 | Jun 4, 2021 |
| Rocky_linux | — | Upgrade lasso-develUpgrade lasso-debuginfoUpgrade lassoUpgrade lasso-debugsource | May 5, 2022 | Jun 4, 2021 |
| Suse | — | Upgrade liblasso3Upgrade liblasso-develUpgrade python3-lasso | Jul 20, 2021 | Jun 2, 2021 |
| Ubuntu | — | Upgrade liblasso3Upgrade python3-lassoUpgrade python-lassoUpgrade liblasso-perl | Jun 2, 2021 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub