netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-g58x-799h-v9h6
GHSA-5pcj-3m26-w633
GHSA-8w49-h785-mj3c
GHSA-5pcj-3m26-w633
This commit is contained in:
advisory-database[bot]
2024-11-22 20:27:14 +00:00
parent eff00666d7
commit 11331012f3
4 changed files with 176 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-g58x-799h-v9h6/GHSA-g58x-799h-v9h6.json → advisories/github-reviewed/2022/05/GHSA-g58x-799h-v9h6/GHSA-g58x-799h-v9h6.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g58x-799h-v9h6",
"modified": "2022-05-14T01:36:13Z",
"modified": "2024-11-22T20:25:10Z",
"published": "2022-05-14T01:36:13Z",
"aliases": [
"CVE-2019-7560"
],
"summary": "Boolector use after free",
"details": "In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or btor_delete.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "pyboolector"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.1.0"
}
]
}
]
}
],
"references": [
{
@@ -28,6 +47,14 @@
{
"type": "WEB",
"url": "https://github.com/Boolector/boolector/issues/29"
},
{
"type": "PACKAGE",
"url": "https://github.com/boolector/boolector"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pyboolector/PYSEC-2019-252.yaml"
}
],
"database_specific": {
@@ -35,8 +62,8 @@
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-11-22T20:25:10Z",
"nvd_published_at": "2019-02-07T07:29:00Z"
}
}
advisories/github-reviewed/2022/12/GHSA-5pcj-3m26-w633/GHSA-5pcj-3m26-w633.json
+84
View File
@@ -0,0 +1,84 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5pcj-3m26-w633",
"modified": "2024-11-22T20:26:19Z",
"published": "2022-12-20T00:30:29Z",
"aliases": [
"CVE-2022-44940"
],
"summary": "Patchelf out-of-bounds read",
"details": "Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "patchelf"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.16.1.0"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "pypatchelf"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "< 0.16.0"
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44940"
},
{
"type": "WEB",
"url": "https://github.com/NixOS/patchelf/pull/419"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/patchelf/PYSEC-2022-43144.yaml"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pypatchelf/PYSEC-2022-43151.yaml"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2024-11-22T20:26:19Z",
"nvd_published_at": "2022-12-19T22:15:00Z"
}
}
advisories/github-reviewed/2024/11/GHSA-8w49-h785-mj3c/GHSA-8w49-h785-mj3c.json
+61
View File
@@ -0,0 +1,61 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8w49-h785-mj3c",
"modified": "2024-11-22T20:26:41Z",
"published": "2024-11-22T20:26:41Z",
"aliases": [
"CVE-2024-52804"
],
"summary": "Tornado has an HTTP cookie parsing DoS vulnerability",
"details": "The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in the event loop thread and may block the processing of other requests.\n\nSee also CVE-2024-7592 for a similar vulnerability in cpython.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "tornado"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.4.2"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 6.4.1"
}
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-8w49-h785-mj3c"
},
{
"type": "PACKAGE",
"url": "https://github.com/tornadoweb/tornado"
}
],
"database_specific": {
"cwe_ids": [
"CWE-400",
"CWE-770"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-11-22T20:26:41Z",
"nvd_published_at": null
}
}
advisories/unreviewed/2022/12/GHSA-5pcj-3m26-w633/GHSA-5pcj-3m26-w633.json
-38
View File
@@ -1,38 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5pcj-3m26-w633",
"modified": "2022-12-27T18:30:20Z",
"published": "2022-12-20T00:30:29Z",
"aliases": [
"CVE-2022-44940"
],
"details": "Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44940"
},
{
"type": "WEB",
"url": "https://github.com/NixOS/patchelf/pull/419"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-12-19T22:15:00Z"
}
}