From 24c836f08cda5e9390146643ef2cffe9ede4d5c2 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Sat, 3 May 2025 00:32:07 +0000 Subject: [PATCH] Publish Advisories GHSA-rgvf-j3x5-6277 GHSA-r8h6-cwxj-rv5j GHSA-7c7g-wccp-rrhj GHSA-7975-2qr9-g542 GHSA-4f99-6w2j-877c GHSA-5vvw-768m-99hf GHSA-v2gm-5jqw-x4qc --- .../GHSA-rgvf-j3x5-6277.json | 6 ++- .../GHSA-r8h6-cwxj-rv5j.json | 6 ++- .../GHSA-7c7g-wccp-rrhj.json | 6 ++- .../GHSA-7975-2qr9-g542.json | 6 ++- .../GHSA-4f99-6w2j-877c.json | 42 +++++++++++++++++++ .../GHSA-5vvw-768m-99hf.json | 34 +++++++++++++++ .../GHSA-v2gm-5jqw-x4qc.json | 33 +++++++++++++++ 7 files changed, 129 insertions(+), 4 deletions(-) create mode 100644 advisories/unreviewed/2025/05/GHSA-4f99-6w2j-877c/GHSA-4f99-6w2j-877c.json create mode 100644 advisories/unreviewed/2025/05/GHSA-5vvw-768m-99hf/GHSA-5vvw-768m-99hf.json create mode 100644 advisories/unreviewed/2025/05/GHSA-v2gm-5jqw-x4qc/GHSA-v2gm-5jqw-x4qc.json diff --git a/advisories/unreviewed/2024/04/GHSA-rgvf-j3x5-6277/GHSA-rgvf-j3x5-6277.json b/advisories/unreviewed/2024/04/GHSA-rgvf-j3x5-6277/GHSA-rgvf-j3x5-6277.json index 314dd65bc42..1ee4d1d3543 100644 --- a/advisories/unreviewed/2024/04/GHSA-rgvf-j3x5-6277/GHSA-rgvf-j3x5-6277.json +++ b/advisories/unreviewed/2024/04/GHSA-rgvf-j3x5-6277/GHSA-rgvf-j3x5-6277.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rgvf-j3x5-6277", - "modified": "2024-09-25T03:30:35Z", + "modified": "2025-05-03T00:30:32Z", "published": "2024-04-09T21:32:00Z", "aliases": [ "CVE-2024-3446" @@ -34,6 +34,10 @@ { "type": "WEB", "url": "https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org" + }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20250502-0007" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/07/GHSA-r8h6-cwxj-rv5j/GHSA-r8h6-cwxj-rv5j.json b/advisories/unreviewed/2024/07/GHSA-r8h6-cwxj-rv5j/GHSA-r8h6-cwxj-rv5j.json index e55e1aed7c3..83c5bd52edb 100644 --- a/advisories/unreviewed/2024/07/GHSA-r8h6-cwxj-rv5j/GHSA-r8h6-cwxj-rv5j.json +++ b/advisories/unreviewed/2024/07/GHSA-r8h6-cwxj-rv5j/GHSA-r8h6-cwxj-rv5j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r8h6-cwxj-rv5j", - "modified": "2025-01-31T21:32:44Z", + "modified": "2025-05-03T00:30:32Z", "published": "2024-07-30T00:34:24Z", "aliases": [ "CVE-2024-3219" @@ -87,6 +87,10 @@ "type": "WEB", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/WYKDQWIERRE2ICIYMSVRZJO33GSCWU2B" }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20250502-0004" + }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2024/07/29/3" diff --git a/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json b/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json index 4f7e292a911..5c6329cf407 100644 --- a/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json +++ b/advisories/unreviewed/2024/08/GHSA-7c7g-wccp-rrhj/GHSA-7c7g-wccp-rrhj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7c7g-wccp-rrhj", - "modified": "2024-12-12T06:30:48Z", + "modified": "2025-05-03T00:30:32Z", "published": "2024-08-05T15:30:53Z", "aliases": [ "CVE-2024-7409" @@ -70,6 +70,10 @@ { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302487" + }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20250502-0008" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-7975-2qr9-g542/GHSA-7975-2qr9-g542.json b/advisories/unreviewed/2025/01/GHSA-7975-2qr9-g542/GHSA-7975-2qr9-g542.json index 968ff6b1e3f..306e08adb25 100644 --- a/advisories/unreviewed/2025/01/GHSA-7975-2qr9-g542/GHSA-7975-2qr9-g542.json +++ b/advisories/unreviewed/2025/01/GHSA-7975-2qr9-g542/GHSA-7975-2qr9-g542.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7975-2qr9-g542", - "modified": "2025-01-09T03:30:48Z", + "modified": "2025-05-03T00:30:32Z", "published": "2025-01-09T03:30:48Z", "aliases": [ "CVE-2024-37372" @@ -19,6 +19,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37372" }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20250502-0010" + }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2024/07/11/6" diff --git a/advisories/unreviewed/2025/05/GHSA-4f99-6w2j-877c/GHSA-4f99-6w2j-877c.json b/advisories/unreviewed/2025/05/GHSA-4f99-6w2j-877c/GHSA-4f99-6w2j-877c.json new file mode 100644 index 00000000000..dccf4f610be --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-4f99-6w2j-877c/GHSA-4f99-6w2j-877c.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4f99-6w2j-877c", + "modified": "2025-05-03T00:30:32Z", + "published": "2025-05-03T00:30:32Z", + "aliases": [ + "CVE-2022-21546" + ], + "details": "In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like \"sg_write_same --ndob\" we will crash in target_core_iblock/file's execute_write_same handlers when we go to access the se_cmd->t_data_sg because its NULL. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21546" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/linus/ccd3f449052449a917a3e577d8ba0368f43b8f29" + }, + { + "type": "WEB", + "url": "https://linux.oracle.com/cve/CVE-2022-21546.html" + }, + { + "type": "WEB", + "url": "https://lore.kernel.org/all/20220628022325.14627-2-michael.christie@oracle.com" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T22:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-5vvw-768m-99hf/GHSA-5vvw-768m-99hf.json b/advisories/unreviewed/2025/05/GHSA-5vvw-768m-99hf/GHSA-5vvw-768m-99hf.json new file mode 100644 index 00000000000..33cdd448f37 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-5vvw-768m-99hf/GHSA-5vvw-768m-99hf.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5vvw-768m-99hf", + "modified": "2025-05-03T00:30:32Z", + "published": "2025-05-03T00:30:32Z", + "aliases": [ + "CVE-2025-21572" + ], + "details": "OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21572" + }, + { + "type": "WEB", + "url": "https://www.oracle.com/security-alerts/all-oracle-cves-outside-other-oracle-public-documents.html" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T22:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-v2gm-5jqw-x4qc/GHSA-v2gm-5jqw-x4qc.json b/advisories/unreviewed/2025/05/GHSA-v2gm-5jqw-x4qc/GHSA-v2gm-5jqw-x4qc.json new file mode 100644 index 00000000000..18fa20bf290 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-v2gm-5jqw-x4qc/GHSA-v2gm-5jqw-x4qc.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v2gm-5jqw-x4qc", + "modified": "2025-05-03T00:30:32Z", + "published": "2025-05-03T00:30:32Z", + "aliases": [ + "CVE-2024-55069" + ], + "details": "ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55069" + }, + { + "type": "WEB", + "url": "https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/4cc1495aca45445181a107a682c32cfe31459929" + }, + { + "type": "WEB", + "url": "https://trac.ffmpeg.org/ticket/11326" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T22:15:16Z" + } +} \ No newline at end of file