netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-vqhp-cxgc-6wmm
GHSA-vv2x-vrpj-qqpq
GHSA-xjgw-ghrx-wfff
GHSA-92cp-5422-2mw7
GHSA-w2rr-38wv-8rrp
This commit is contained in:
advisory-database[bot]
2025-03-20 18:51:26 +00:00
parent 57f7508e60
commit 2b890a44a2
5 changed files with 179 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2020/03/GHSA-vqhp-cxgc-6wmm/GHSA-vqhp-cxgc-6wmm.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vqhp-cxgc-6wmm",
"modified": "2024-09-06T15:46:14Z",
"modified": "2025-03-20T18:49:18Z",
"published": "2020-03-30T19:45:56Z",
"aliases": [
"CVE-2020-6817"
advisories/github-reviewed/2021/02/GHSA-vv2x-vrpj-qqpq/GHSA-vv2x-vrpj-qqpq.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vv2x-vrpj-qqpq",
"modified": "2024-09-13T15:15:58Z",
"modified": "2025-03-20T18:50:31Z",
"published": "2021-02-02T17:58:40Z",
"aliases": [
"CVE-2021-23980"
advisories/github-reviewed/2024/07/GHSA-xjgw-ghrx-wfff/GHSA-xjgw-ghrx-wfff.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xjgw-ghrx-wfff",
"modified": "2024-07-18T14:41:26Z",
"modified": "2025-03-20T18:50:54Z",
"published": "2024-07-17T21:31:38Z",
"aliases": [
"CVE-2024-39125"
advisories/github-reviewed/2025/03/GHSA-92cp-5422-2mw7/GHSA-92cp-5422-2mw7.json
+107
View File
@@ -0,0 +1,107 @@
{
"schema_version": "1.4.0",
"id": "GHSA-92cp-5422-2mw7",
"modified": "2025-03-20T18:49:59Z",
"published": "2025-03-20T18:49:59Z",
"aliases": [
"CVE-2025-29923"
],
"summary": "go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment",
"details": "### Impact\n\nThe issue only occurs when the `CLIENT SETINFO` command times out during connection establishment. The following circumstances can cause such a timeout:\n\n1. The client is configured to transmit its identity. This can be disabled via the `DisableIndentity` flag.\n2. There are network connectivity issues\n3. The client was configured with aggressive timeouts\n\nThe impact differs by use case:\n\n* **Sticky connections**: Rather than using a connection from the pool on-demand, the caller can stick with a connection. Then you receive persistent out-of-order responses for the lifetime of the connection.\n* **Pipelines**: All commands in the pipeline receive incorrect responses.\n* **Default connection pool usage without pipelining**: When used with the default [ConnPool](https://github.com/redis/go-redis/blob/8fadbef84a3f4e7573f8b38e5023fd469470a8a4/internal/pool/pool.go#L77) once a connection is returned after use with [ConnPool#Put](https://github.com/redis/go-redis/blob/8fadbef84a3f4e7573f8b38e5023fd469470a8a4/internal/pool/pool.go#L366) the read buffer will be checked and the connection will be marked as bad due to the unread data. This means that at most one out-of-order response before the connection is discarded.\n\n### Patches\nWe prepared a fix in https://github.com/redis/go-redis/pull/3295 and plan to release patch versions soon.\n\n### Workarounds\nYou can prevent the vulnerability by setting the flag `DisableIndentity` (BTW: We also need to fix the spelling.) to `true` when constructing the client instance.\n\n### Credit\n\nAkhass Wasti\nRamin Ghorashi\nAnton Amlinger\nSyed Rahman\nMahesh Venkateswaran\nSergey Zavoloka\nAditya Adarwal\nAbdulla Anam\nAbd-Alhameed\nAlex Vanlint\nGaurav Choudhary\nVedanta Jha\nYll Kelani\nRyan Picard",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Go",
"name": "github.com/redis/go-redis/v9"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.7.0-beta.1"
},
{
"fixed": "9.7.3"
}
]
}
]
},
{
"package": {
"ecosystem": "Go",
"name": "github.com/redis/go-redis/v9"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.6.0b1"
},
{
"fixed": "9.6.3"
}
]
}
]
},
{
"package": {
"ecosystem": "Go",
"name": "github.com/redis/go-redis/v9"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.5.1"
},
{
"fixed": "9.5.5"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/redis/go-redis/security/advisories/GHSA-92cp-5422-2mw7"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29923"
},
{
"type": "WEB",
"url": "https://github.com/redis/go-redis/pull/3295"
},
{
"type": "WEB",
"url": "https://github.com/redis/go-redis/commit/d236865b0cfa1b752ea4b7da666b1fdcd0acebb6"
},
{
"type": "PACKAGE",
"url": "https://github.com/redis/go-redis"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2025-03-20T18:49:59Z",
"nvd_published_at": "2025-03-20T18:15:19Z"
}
}
advisories/github-reviewed/2025/03/GHSA-w2rr-38wv-8rrp/GHSA-w2rr-38wv-8rrp.json
+69
View File
@@ -0,0 +1,69 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w2rr-38wv-8rrp",
"modified": "2025-03-20T18:49:06Z",
"published": "2025-03-20T18:49:06Z",
"aliases": [
"CVE-2025-29922"
],
"summary": "kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace",
"details": "### Impact\n\nThe `APIExport` Virtual Workspace can be used to manage objects in workspaces that bind that `APIExport` for resources defined in the `APIExport` or specified and accepted via permission claims. This allows an API provider (via their `APIExport`) scoped down access to workspaces of API consumers to provide their services properly.\n\nThe identified vulnerability allows creating or deleting an object via the `APIExport` VirtualWorkspace in any arbitrary target workspace for pre-existing resources. By design, this should only be allowed when the workspace owner decides to give access to an API provider by creating an APIBinding.\n\nWith this vulnerability, it is possible for an attacker to create and delete objects even if none of these requirements are satisfied, i.e. even if there is no APIBinding in that workspace at all or the workspace owner has created an APIBinding, but rejected a permission claim.\n\n### Patches\n\nA fix for this issue has been identified and has been published with kcp 0.26.3 and 0.27.0.\n\n### Workarounds\n\nFor users unable to upgrade to one of the patched versions, the following guidance can be given:\n\n- Minimise the set of people with `apiexport/content` sub-resource access to `APIExport` resources. Be aware that this has to apply to all workspaces to be effective.\n- Filter incoming requests in a reverse proxy with a similar logic as the authorizer added in the referenced pull request.\n\n### References\n\nSee pull request (https://github.com/kcp-dev/kcp/pull/3338).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Go",
"name": "github.com/kcp-dev/kcp"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.26.3"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/kcp-dev/kcp/security/advisories/GHSA-w2rr-38wv-8rrp"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29922"
},
{
"type": "WEB",
"url": "https://github.com/kcp-dev/kcp/pull/3338"
},
{
"type": "WEB",
"url": "https://github.com/kcp-dev/kcp/commit/614ecbf35f11db00f65391ab6fbb1547ca8b5d38"
},
{
"type": "PACKAGE",
"url": "https://github.com/kcp-dev/kcp"
}
],
"database_specific": {
"cwe_ids": [
"CWE-285"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2025-03-20T18:49:06Z",
"nvd_published_at": "2025-03-20T18:15:19Z"
}
}