netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-3x47-w4rx-6pm7
GHSA-25qx-vfw2-fw8r
GHSA-723h-x37g-f8qm
GHSA-hfmw-7g3m-gj6q
This commit is contained in:
advisory-database[bot]
2024-09-25 19:28:39 +00:00
parent ba75ee3c46
commit 0f75cdb0d8
4 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/06/GHSA-3x47-w4rx-6pm7/GHSA-3x47-w4rx-6pm7.json
+1
View File
@@ -59,6 +59,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-29"
],
"severity": "HIGH",
advisories/github-reviewed/2024/08/GHSA-25qx-vfw2-fw8r/GHSA-25qx-vfw2-fw8r.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-25qx-vfw2-fw8r",
"modified": "2024-08-15T21:24:57Z",
"modified": "2024-09-25T19:27:54Z",
"published": "2024-08-15T00:30:59Z",
"aliases": [
"CVE-2024-7625"
],
"summary": "Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking",
"details": "In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.16.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.",
"details": "In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.",
"severity": [
{
"type": "CVSS_V3",
advisories/github-reviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-723h-x37g-f8qm",
"modified": "2024-09-18T19:34:07Z",
"modified": "2024-09-25T19:28:11Z",
"published": "2024-09-18T18:30:51Z",
"aliases": [
"CVE-2023-47105"
@@ -48,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/chaosblade-io/chaosblade/commit/6bc73c31e14ea2b1bfc30f359e1fe952859d9adc"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-723h-x37g-f8qm"
},
{
"type": "PACKAGE",
"url": "https://github.com/chaosblade-io/chaosblade"
advisories/github-reviewed/2024/09/GHSA-hfmw-7g3m-gj6q/GHSA-hfmw-7g3m-gj6q.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hfmw-7g3m-gj6q",
"modified": "2024-09-18T17:38:50Z",
"modified": "2024-09-25T19:27:57Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2023-28452"
@@ -56,6 +56,10 @@
"type": "WEB",
"url": "https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-hfmw-7g3m-gj6q"
},
{
"type": "PACKAGE",
"url": "https://github.com/coredns/coredns"