netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-12-06 15:32:42 +00:00
parent 5070ac0f7a
commit 0f601324fe
74 changed files with 2161 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/03/GHSA-g2j6-57v7-gm8c/GHSA-g2j6-57v7-gm8c.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g2j6-57v7-gm8c",
"modified": "2023-03-30T20:20:23Z",
"modified": "2024-12-06T15:31:17Z",
"published": "2023-03-30T20:20:23Z",
"aliases": [
"CVE-2023-28642"
@@ -51,6 +51,10 @@
{
"type": "PACKAGE",
"url": "https://github.com/opencontainers/runc"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20241206-0005"
}
],
"database_specific": {
advisories/github-reviewed/2023/03/GHSA-vpvm-3wq2-2wvm/GHSA-vpvm-3wq2-2wvm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vpvm-3wq2-2wvm",
"modified": "2024-07-03T20:30:48Z",
"modified": "2024-12-06T15:31:17Z",
"published": "2023-03-03T21:30:19Z",
"aliases": [
"CVE-2023-27561"
@@ -52,6 +52,10 @@
"type": "WEB",
"url": "https://github.com/opencontainers/runc/pull/3785"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20241206-0004"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ"
advisories/github-reviewed/2024/05/GHSA-8xfc-gm6g-vgpv/GHSA-8xfc-gm6g-vgpv.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8xfc-gm6g-vgpv",
"modified": "2024-09-09T21:32:53Z",
"modified": "2024-12-06T15:31:20Z",
"published": "2024-05-14T15:32:54Z",
"aliases": [
"CVE-2024-29857"
@@ -231,6 +231,10 @@
"type": "WEB",
"url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20241206-0008"
},
{
"type": "WEB",
"url": "https://www.bouncycastle.org/latest_releases.html"
advisories/github-reviewed/2024/06/GHSA-fwhr-88qx-h9g7/GHSA-fwhr-88qx-h9g7.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fwhr-88qx-h9g7",
"modified": "2024-06-05T21:54:36Z",
"modified": "2024-12-06T15:31:19Z",
"published": "2024-06-04T22:26:24Z",
"aliases": [
"CVE-2024-28103"
@@ -115,6 +115,10 @@
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-28103.yml"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20241206-0002"
}
],
"database_specific": {
advisories/unreviewed/2022/05/GHSA-2hpj-v4f4-7g4j/GHSA-2hpj-v4f4-7g4j.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hpj-v4f4-7g4j",
"modified": "2024-04-04T00:55:12Z",
"modified": "2024-12-06T15:31:17Z",
"published": "2022-05-24T16:47:45Z",
"aliases": [
"CVE-2019-12749"
@@ -55,6 +55,10 @@
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201909-08"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20241206-0010"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4015-1"
advisories/unreviewed/2023/06/GHSA-68g3-2p3g-w9pq/GHSA-68g3-2p3g-w9pq.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-68g3-2p3g-w9pq",
"modified": "2023-11-25T12:30:22Z",
"modified": "2024-12-06T15:31:17Z",
"published": "2023-06-08T21:30:27Z",
"aliases": [
"CVE-2023-29405"
@@ -46,6 +46,10 @@
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202311-09"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20241206-0003"
}
],
"database_specific": {
advisories/unreviewed/2023/11/GHSA-2vjj-r39q-gvxr/GHSA-2vjj-r39q-gvxr.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2vjj-r39q-gvxr",
"modified": "2023-11-30T06:33:24Z",
"modified": "2024-12-06T15:31:17Z",
"published": "2023-11-28T00:30:33Z",
"aliases": [
"CVE-2023-42366"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://bugs.busybox.net/show_bug.cgi?id=15874"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20241206-0007"
}
],
"database_specific": {
advisories/unreviewed/2024/02/GHSA-28cg-r647-j4cw/GHSA-28cg-r647-j4cw.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-28cg-r647-j4cw",
"modified": "2024-02-28T09:30:37Z",
"modified": "2024-12-06T15:31:19Z",
"published": "2024-02-28T09:30:37Z",
"aliases": [
"CVE-2021-46998"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nethernet:enic: Fix a use after free bug in enic_hard_start_xmit\n\nIn enic_hard_start_xmit, it calls enic_queue_wq_skb(). Inside\nenic_queue_wq_skb, if some error happens, the skb will be freed\nby dev_kfree_skb(skb). But the freed skb is still used in\nskb_tx_timestamp(skb).\n\nMy patch makes enic_queue_wq_skb() return error and goto spin_unlock()\nincase of error. The solution is provided by Govind.\nSee https://lkml.org/lkml/2021/4/30/961.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -40,8 +45,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-28T09:15:38Z"
advisories/unreviewed/2024/02/GHSA-2cmc-x892-vrfq/GHSA-2cmc-x892-vrfq.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2cmc-x892-vrfq",
"modified": "2024-02-21T09:31:00Z",
"modified": "2024-12-06T15:31:18Z",
"published": "2024-02-21T09:31:00Z",
"aliases": [
"CVE-2023-42836"
],
"details": "A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -33,7 +38,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T07:15:48Z"
advisories/unreviewed/2024/02/GHSA-4q6w-gxhv-h434/GHSA-4q6w-gxhv-h434.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4q6w-gxhv-h434",
"modified": "2024-02-28T09:30:37Z",
"modified": "2024-12-06T15:31:19Z",
"published": "2024-02-28T09:30:37Z",
"aliases": [
"CVE-2021-46996"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nftables: Fix a memleak from userdata error path in new objects\n\nRelease object name if userdata allocation fails.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-401"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-28T09:15:38Z"
advisories/unreviewed/2024/02/GHSA-4qp7-5rvw-5428/GHSA-4qp7-5rvw-5428.json
+11 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/02/GHSA-5vm6-785f-3cj3/GHSA-5vm6-785f-3cj3.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5vm6-785f-3cj3",
"modified": "2024-02-28T09:30:37Z",
"modified": "2024-12-06T15:31:19Z",
"published": "2024-02-28T09:30:37Z",
"aliases": [
"CVE-2021-46995"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe\n\nWhen we converted this code to use dev_err_probe() we accidentally\nremoved a return. It means that if devm_clk_get() it will lead to an\nOops when we call clk_get_rate() on the next line.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-476"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-28T09:15:37Z"
advisories/unreviewed/2024/02/GHSA-73pj-jqmg-pmr5/GHSA-73pj-jqmg-pmr5.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-73pj-jqmg-pmr5",
"modified": "2024-02-28T09:30:37Z",
"modified": "2024-12-06T15:31:19Z",
"published": "2024-02-28T09:30:37Z",
"aliases": [
"CVE-2021-46991"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix use-after-free in i40e_client_subtask()\n\nCurrently the call to i40e_client_del_instance frees the object\npf->cinst, however pf->cinst->lan_info is being accessed after\nthe free. Fix this by adding the missing return.\n\nAddresses-Coverity: (\"Read from pointer after free\")",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -40,8 +45,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-28T09:15:37Z"
advisories/unreviewed/2024/02/GHSA-7896-9859-h9rc/GHSA-7896-9859-h9rc.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7896-9859-h9rc",
"modified": "2024-02-28T09:30:37Z",
"modified": "2024-12-06T15:31:18Z",
"published": "2024-02-28T09:30:37Z",
"aliases": [
"CVE-2021-46985"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: scan: Fix a memory leak in an error handling path\n\nIf 'acpi_device_set_name()' fails, we must free\n'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -48,8 +53,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-401"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-28T09:15:37Z"
advisories/unreviewed/2024/02/GHSA-85xw-cv8g-9227/GHSA-85xw-cv8g-9227.json
+11 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/02/GHSA-9h3w-jq64-m799/GHSA-9h3w-jq64-m799.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9h3w-jq64-m799",
"modified": "2024-02-28T09:30:37Z",
"modified": "2024-12-06T15:31:19Z",
"published": "2024-02-28T09:30:37Z",
"aliases": [
"CVE-2021-46994"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: mcp251x: fix resume from sleep before interface was brought up\n\nSince 8ce8c0abcba3 the driver queues work via priv->restart_work when\nresuming after suspend, even when the interface was not previously\nenabled. This causes a null dereference error as the workqueue is only\nallocated and initialized in mcp251x_open().\n\nTo fix this we move the workqueue init to mcp251x_can_probe() as there\nis no reason to do it later and repeat it whenever mcp251x_open() is\ncalled.\n\n[mkl: fix error handling in mcp251x_stop()]",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-476"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-28T09:15:37Z"
advisories/unreviewed/2024/02/GHSA-frg3-hm7v-3rpf/GHSA-frg3-hm7v-3rpf.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frg3-hm7v-3rpf",
"modified": "2024-02-26T18:30:28Z",
"modified": "2024-12-06T15:31:18Z",
"published": "2024-02-21T06:30:32Z",
"aliases": [
"CVE-2024-1671"
],
"details": "Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"affected": [],
"references": [
{
@@ -33,7 +38,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T04:15:08Z"
advisories/unreviewed/2024/02/GHSA-rj5v-wjwr-jxjq/GHSA-rj5v-wjwr-jxjq.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rj5v-wjwr-jxjq",
"modified": "2024-02-21T09:31:00Z",
"modified": "2024-12-06T15:31:18Z",
"published": "2024-02-21T09:31:00Z",
"aliases": [
"CVE-2023-42839"
],
"details": "This issue was addressed with improved state management. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-922"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T07:15:48Z"
advisories/unreviewed/2024/02/GHSA-wqqw-j26h-m6w3/GHSA-wqqw-j26h-m6w3.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
"CWE-122",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-9v4g-5w22-xh84/GHSA-9v4g-5w22-xh84.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9v4g-5w22-xh84",
"modified": "2024-03-14T00:31:05Z",
"modified": "2024-12-06T15:31:19Z",
"published": "2024-03-08T03:31:24Z",
"aliases": [
"CVE-2024-23239"
],
"details": "A race condition was addressed with improved state handling. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to leak sensitive user information.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -44,8 +49,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-362"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-08T02:15:48Z"

Some files were not shown because too many files have changed in this diff Show More