diff --git a/advisories/unreviewed/2024/02/GHSA-3659-jjmv-v338/GHSA-3659-jjmv-v338.json b/advisories/unreviewed/2024/02/GHSA-3659-jjmv-v338/GHSA-3659-jjmv-v338.json new file mode 100644 index 00000000000..213626d957b --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-3659-jjmv-v338/GHSA-3659-jjmv-v338.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3659-jjmv-v338", + "modified": "2024-02-29T12:31:06Z", + "published": "2024-02-29T12:31:06Z", + "aliases": [ + "CVE-2024-26607" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: sii902x: Fix probing race issue\n\nA null pointer dereference crash has been observed rarely on TI\nplatforms using sii9022 bridge:\n\n[ 53.271356] sii902x_get_edid+0x34/0x70 [sii902x]\n[ 53.276066] sii902x_bridge_get_edid+0x14/0x20 [sii902x]\n[ 53.281381] drm_bridge_get_edid+0x20/0x34 [drm]\n[ 53.286305] drm_bridge_connector_get_modes+0x8c/0xcc [drm_kms_helper]\n[ 53.292955] drm_helper_probe_single_connector_modes+0x190/0x538 [drm_kms_helper]\n[ 53.300510] drm_client_modeset_probe+0x1f0/0xbd4 [drm]\n[ 53.305958] __drm_fb_helper_initial_config_and_unlock+0x50/0x510 [drm_kms_helper]\n[ 53.313611] drm_fb_helper_initial_config+0x48/0x58 [drm_kms_helper]\n[ 53.320039] drm_fbdev_dma_client_hotplug+0x84/0xd4 [drm_dma_helper]\n[ 53.326401] drm_client_register+0x5c/0xa0 [drm]\n[ 53.331216] drm_fbdev_dma_setup+0xc8/0x13c [drm_dma_helper]\n[ 53.336881] tidss_probe+0x128/0x264 [tidss]\n[ 53.341174] platform_probe+0x68/0xc4\n[ 53.344841] really_probe+0x188/0x3c4\n[ 53.348501] __driver_probe_device+0x7c/0x16c\n[ 53.352854] driver_probe_device+0x3c/0x10c\n[ 53.357033] __device_attach_driver+0xbc/0x158\n[ 53.361472] bus_for_each_drv+0x88/0xe8\n[ 53.365303] __device_attach+0xa0/0x1b4\n[ 53.369135] device_initial_probe+0x14/0x20\n[ 53.373314] bus_probe_device+0xb0/0xb4\n[ 53.377145] deferred_probe_work_func+0xcc/0x124\n[ 53.381757] process_one_work+0x1f0/0x518\n[ 53.385770] worker_thread+0x1e8/0x3dc\n[ 53.389519] kthread+0x11c/0x120\n[ 53.392750] ret_from_fork+0x10/0x20\n\nThe issue here is as follows:\n\n- tidss probes, but is deferred as sii902x is still missing.\n- sii902x starts probing and enters sii902x_init().\n- sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from\n DRM's perspective.\n- sii902x calls sii902x_audio_codec_init() and\n platform_device_register_data()\n- The registration of the audio platform device causes probing of the\n deferred devices.\n- tidss probes, which eventually causes sii902x_bridge_get_edid() to be\n called.\n- sii902x_bridge_get_edid() tries to use the i2c to read the edid.\n However, the sii902x driver has not set up the i2c part yet, leading\n to the crash.\n\nFix this by moving the drm_bridge_add() to the end of the\nsii902x_init(), which is also at the very end of sii902x_probe().", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26607" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/08ac6f132dd77e40f786d8af51140c96c6d739c9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2a4c6af7934a7b4c304542c38fee35e09cc1770c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/56f96cf6eb11a1c2d594367c3becbfb06a855ec1" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e0f83c234ea7a3dec1f84e5d02caa1c51664a076" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T12:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-3g35-v53r-gpxc/GHSA-3g35-v53r-gpxc.json b/advisories/unreviewed/2024/02/GHSA-3g35-v53r-gpxc/GHSA-3g35-v53r-gpxc.json new file mode 100644 index 00000000000..be4d1a48a7c --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-3g35-v53r-gpxc/GHSA-3g35-v53r-gpxc.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3g35-v53r-gpxc", + "modified": "2024-02-29T12:31:06Z", + "published": "2024-02-29T12:31:06Z", + "aliases": [ + "CVE-2024-1949" + ], + "details": "A race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized access to individual posts' contents via carefully timed post creation while another user deletes posts.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1949" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T11:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json b/advisories/unreviewed/2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json new file mode 100644 index 00000000000..98b333d40ae --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-6v6w-h8m6-7mv2/GHSA-6v6w-h8m6-7mv2.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6v6w-h8m6-7mv2", + "modified": "2024-02-29T12:31:06Z", + "published": "2024-02-29T12:31:06Z", + "aliases": [ + "CVE-2024-27906" + ], + "details": "Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.\n\nUsers of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability\n", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27906" + }, + { + "type": "WEB", + "url": "https://github.com/apache/airflow/pull/37290" + }, + { + "type": "WEB", + "url": "https://github.com/apache/airflow/pull/37468" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/on4f7t5sqr3vfgp1pvkck79wv7mq9st5" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-668" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T11:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-8w59-6xpv-7xqr/GHSA-8w59-6xpv-7xqr.json b/advisories/unreviewed/2024/02/GHSA-8w59-6xpv-7xqr/GHSA-8w59-6xpv-7xqr.json new file mode 100644 index 00000000000..159d2bb7eb6 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-8w59-6xpv-7xqr/GHSA-8w59-6xpv-7xqr.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8w59-6xpv-7xqr", + "modified": "2024-02-29T12:31:05Z", + "published": "2024-02-29T12:31:05Z", + "aliases": [ + "CVE-2024-1619" + ], + "details": "Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1619" + }, + { + "type": "WEB", + "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#010224" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T10:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-hwjf-4667-gqwx/GHSA-hwjf-4667-gqwx.json b/advisories/unreviewed/2024/02/GHSA-hwjf-4667-gqwx/GHSA-hwjf-4667-gqwx.json new file mode 100644 index 00000000000..795f367850a --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-hwjf-4667-gqwx/GHSA-hwjf-4667-gqwx.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hwjf-4667-gqwx", + "modified": "2024-02-29T12:31:06Z", + "published": "2024-02-29T12:31:06Z", + "aliases": [ + "CVE-2024-1942" + ], + "details": "Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize the metadata on posts containing permalinks under specific conditions, which allows an authenticated attacker to access the contents of individual posts in channels they are not a member of.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1942" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T11:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-r4fm-g65h-cr54/GHSA-r4fm-g65h-cr54.json b/advisories/unreviewed/2024/02/GHSA-r4fm-g65h-cr54/GHSA-r4fm-g65h-cr54.json new file mode 100644 index 00000000000..c629976449e --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-r4fm-g65h-cr54/GHSA-r4fm-g65h-cr54.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r4fm-g65h-cr54", + "modified": "2024-02-29T12:31:06Z", + "published": "2024-02-29T12:31:06Z", + "aliases": [ + "CVE-2024-1952" + ], + "details": "Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing an authenticated attacker who can control the ephemeral post update to access individual posts' contents in channels they are not a member of.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1952" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T11:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-vm9m-57jr-4pxh/GHSA-vm9m-57jr-4pxh.json b/advisories/unreviewed/2024/02/GHSA-vm9m-57jr-4pxh/GHSA-vm9m-57jr-4pxh.json new file mode 100644 index 00000000000..48ced007e67 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-vm9m-57jr-4pxh/GHSA-vm9m-57jr-4pxh.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vm9m-57jr-4pxh", + "modified": "2024-02-29T12:31:06Z", + "published": "2024-02-29T12:31:06Z", + "aliases": [ + "CVE-2024-1953" + ], + "details": "Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, 9.3.0, and 9.4.x before 9.4.2 fail to limit the number of role names requested from the API, allowing an authenticated attacker to cause the server to run out of memory and crash by issuing an unusually large HTTP request.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1953" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-400" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-29T11:15:08Z" + } +} \ No newline at end of file