netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-29qg-42xm-553c
GHSA-2jv4-g2j5-gcgx
GHSA-43hx-x24h-xvhj
GHSA-5h89-mf56-355j
GHSA-5xr6-cc3c-2qwf
GHSA-6hxw-8gp8-w9xm
GHSA-7c6q-rv7c-g9mh
GHSA-9x6m-493j-h4m7
GHSA-fx8p-x9wh-4h4w
GHSA-hcqq-p4c4-5775
GHSA-j66c-q55p-63p7
GHSA-mj5v-92gq-pg5q
GHSA-w495-f5mg-799h
This commit is contained in:
advisory-database[bot]
2025-06-08 12:32:04 +00:00
parent 3c289c5496
commit 2f098fefbf
13 changed files with 510 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/06/GHSA-29qg-42xm-553c/GHSA-29qg-42xm-553c.json
+57
View File
@@ -0,0 +1,57 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29qg-42xm-553c",
"modified": "2025-06-08T12:30:32Z",
"published": "2025-06-08T12:30:32Z",
"aliases": [
"CVE-2025-38004"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: add locking for bcm_op runtime updates\n\nThe CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via\nhrtimer. The content and also the length of the sequence can be changed\nresp reduced at runtime where the 'currframe' counter is then set to zero.\n\nAlthough this appeared to be a safe operation the updates of 'currframe'\ncan be triggered from user space and hrtimer context in bcm_can_tx().\nAnderson Nascimento created a proof of concept that triggered a KASAN\nslab-out-of-bounds read access which can be prevented with a spin_lock_bh.\n\nAt the rework of bcm_can_tx() the 'count' variable has been moved into\nthe protected section as this variable can be modified from both contexts\ntoo.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-38004"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/2a437b86ac5a9893c902f30ef66815bf13587bf6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/7595de7bc56e0e52b74e56c90f7e247bf626d628"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/76c84c3728178b2d38d5604e399dfe8b0752645e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/8f1c022541bf5a923c8d6fa483112c15250f30a4"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c4e8a172501e677ebd8ea9d9161d97dc4df56fbd"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/cc55dd28c20a6611e30596019b3b2f636819a4c0"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/fbd8fdc2b218e979cfe422b139b8f74c12419d1f"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T11:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-2jv4-g2j5-gcgx/GHSA-2jv4-g2j5-gcgx.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2jv4-g2j5-gcgx",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-27131"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27131"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-43hx-x24h-xvhj/GHSA-43hx-x24h-xvhj.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-43hx-x24h-xvhj",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-26691"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26691"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-5h89-mf56-355j/GHSA-5h89-mf56-355j.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5h89-mf56-355j",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-25217"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25217"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-5xr6-cc3c-2qwf/GHSA-5xr6-cc3c-2qwf.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5xr6-cc3c-2qwf",
"modified": "2025-06-08T12:30:32Z",
"published": "2025-06-08T12:30:32Z",
"aliases": [
"CVE-2025-23235"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23235"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-6hxw-8gp8-w9xm/GHSA-6hxw-8gp8-w9xm.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6hxw-8gp8-w9xm",
"modified": "2025-06-08T12:30:32Z",
"published": "2025-06-08T12:30:32Z",
"aliases": [
"CVE-2025-21082"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21082"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-7c6q-rv7c-g9mh/GHSA-7c6q-rv7c-g9mh.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7c6q-rv7c-g9mh",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-24493"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24493"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-362"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-9x6m-493j-h4m7/GHSA-9x6m-493j-h4m7.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9x6m-493j-h4m7",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-27563"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27563"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-fx8p-x9wh-4h4w/GHSA-fx8p-x9wh-4h4w.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fx8p-x9wh-4h4w",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-27242"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27242"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-hcqq-p4c4-5775/GHSA-hcqq-p4c4-5775.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hcqq-p4c4-5775",
"modified": "2025-06-08T12:30:32Z",
"published": "2025-06-08T12:30:32Z",
"aliases": [
"CVE-2025-20063"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20063"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:20Z"
}
}
advisories/unreviewed/2025/06/GHSA-j66c-q55p-63p7/GHSA-j66c-q55p-63p7.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j66c-q55p-63p7",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-27247"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27247"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-mj5v-92gq-pg5q/GHSA-mj5v-92gq-pg5q.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mj5v-92gq-pg5q",
"modified": "2025-06-08T12:30:33Z",
"published": "2025-06-08T12:30:33Z",
"aliases": [
"CVE-2025-26693"
],
"details": "in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26693"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T12:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-w495-f5mg-799h/GHSA-w495-f5mg-799h.json
+57
View File
@@ -0,0 +1,57 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w495-f5mg-799h",
"modified": "2025-06-08T12:30:32Z",
"published": "2025-06-08T12:30:32Z",
"aliases": [
"CVE-2025-38003"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: add missing rcu read protection for procfs content\n\nWhen the procfs content is generated for a bcm_op which is in the process\nto be removed the procfs output might show unreliable data (UAF).\n\nAs the removal of bcm_op's is already implemented with rcu handling this\npatch adds the missing rcu_read_lock() and makes sure the list entries\nare properly removed under rcu protection.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-38003"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/63567ecd99a24495208dc860d50fb17440043006"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/659701c0b954ccdb4a916a4ad59bbc16e726d42c"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6d7d458c41b98a5c1670cbd36f2923c37de51cf5"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/7c9db92d5f0eadca30884af75c53d601edc512ee"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/dac5e6249159ac255dad9781793dbe5908ac9ddb"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-08T11:15:20Z"
}
}