Publish Advisories

GHSA-rgvf-j3x5-6277
GHSA-r8h6-cwxj-rv5j
GHSA-7c7g-wccp-rrhj
GHSA-7975-2qr9-g542
GHSA-4f99-6w2j-877c
GHSA-5vvw-768m-99hf
GHSA-v2gm-5jqw-x4qc
This commit is contained in:
advisory-database[bot]
2025-05-03 00:32:07 +00:00
parent 79534ee63d
commit 24c836f08c
7 changed files with 129 additions and 4 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rgvf-j3x5-6277",
"modified": "2024-09-25T03:30:35Z",
"modified": "2025-05-03T00:30:32Z",
"published": "2024-04-09T21:32:00Z",
"aliases": [
"CVE-2024-3446"
@@ -34,6 +34,10 @@
{
"type": "WEB",
"url": "https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250502-0007"
}
],
"database_specific": {
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r8h6-cwxj-rv5j",
"modified": "2025-01-31T21:32:44Z",
"modified": "2025-05-03T00:30:32Z",
"published": "2024-07-30T00:34:24Z",
"aliases": [
"CVE-2024-3219"
@@ -87,6 +87,10 @@
"type": "WEB",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/WYKDQWIERRE2ICIYMSVRZJO33GSCWU2B"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250502-0004"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/07/29/3"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7c7g-wccp-rrhj",
"modified": "2024-12-12T06:30:48Z",
"modified": "2025-05-03T00:30:32Z",
"published": "2024-08-05T15:30:53Z",
"aliases": [
"CVE-2024-7409"
@@ -70,6 +70,10 @@
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302487"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250502-0008"
}
],
"database_specific": {
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7975-2qr9-g542",
"modified": "2025-01-09T03:30:48Z",
"modified": "2025-05-03T00:30:32Z",
"published": "2025-01-09T03:30:48Z",
"aliases": [
"CVE-2024-37372"
@@ -19,6 +19,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37372"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250502-0010"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/07/11/6"
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4f99-6w2j-877c",
"modified": "2025-05-03T00:30:32Z",
"published": "2025-05-03T00:30:32Z",
"aliases": [
"CVE-2022-21546"
],
"details": "In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like \"sg_write_same --ndob\" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21546"
},
{
"type": "WEB",
"url": "https://git.kernel.org/linus/ccd3f449052449a917a3e577d8ba0368f43b8f29"
},
{
"type": "WEB",
"url": "https://linux.oracle.com/cve/CVE-2022-21546.html"
},
{
"type": "WEB",
"url": "https://lore.kernel.org/all/20220628022325.14627-2-michael.christie@oracle.com"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-02T22:15:15Z"
}
}
@@ -0,0 +1,34 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5vvw-768m-99hf",
"modified": "2025-05-03T00:30:32Z",
"published": "2025-05-03T00:30:32Z",
"aliases": [
"CVE-2025-21572"
],
"details": "OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21572"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-02T22:15:16Z"
}
}
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v2gm-5jqw-x4qc",
"modified": "2025-05-03T00:30:32Z",
"published": "2025-05-03T00:30:32Z",
"aliases": [
"CVE-2024-55069"
],
"details": "ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55069"
},
{
"type": "WEB",
"url": "https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/4cc1495aca45445181a107a682c32cfe31459929"
},
{
"type": "WEB",
"url": "https://trac.ffmpeg.org/ticket/11326"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-02T22:15:16Z"
}
}