PatchTheCVEpybitmessage vulnerabilities and fixes
Recent CVEs affecting pybitmessage, with upgrade or downgrade steps. 2 tracked.
pybitmessage has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-02-08. Highest priority: CVE-2018-1000070 (score 52/100).
- CVE-2021-26917 MEDIUM 5.5 UPGRADE PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via
- CVE-2018-1000070 HIGH 8.8 DOWNGRADE Bitmessage PyBitmessage version v0.6.2 (and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f
FAQ
How do I fix pybitmessage vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pybitmessage being exploited right now?
None of the tracked pybitmessage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pybitmessage CVE should I patch first?
CVE-2018-1000070 currently ranks highest (52/100): Bitmessage PyBitmessage version v0.6.2 (and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f.