Detections
Analytics

SCA: security update for irrd (GHSA-cqxx-66wh-8pjw)

high Tenable Self-Hosted Container Security Plugin ID 414048

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL
 format. IRRd did not always filter password hashes in query responses relating to `mntner` objects and
 database exports. This may have allowed adversaries to retrieve some of these hashes, perform a brute-
 force search for the clear-text passphrase, and use these to make unauthorised changes to affected IRR
 objects. This issue only affected instances that process password hashes, which means it is limited to
 IRRd instances that serve authoritative databases. IRRd instances operating solely as mirrors of other IRR
 databases are not affected. This has been fixed in IRRd 4.2.3 and the main branch. Versions in the 4.1.x
 series never were affected. Users of the 4.2.x series are strongly recommended to upgrade. There are no
 known workarounds for this issue. (CVE-2022-24798)

See Also

https://github.com/advisories/GHSA-cqxx-66wh-8pjw

Plugin Details

Severity: High

ID: 414048

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2022-24798

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 7.1

Threat Score: 4.9

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 4/1/2022

Vulnerability Publication Date: 3/31/2022

Reference Information

CVE: CVE-2022-24798

cwe: CWE-212