From 3a1713cc4ee8cfcde2f51e0f5a9a20176bf2db4b Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 3 Jan 2024 21:07:35 +0000
Subject: [PATCH] Publish Advisories

GHSA-hf3r-vmrv-7w29
GHSA-hf3r-vmrv-7w29
---
 .../GHSA-hf3r-vmrv-7w29.json                  | 71 +++++++++++++++++++
 .../GHSA-hf3r-vmrv-7w29.json                  | 51 -------------
 2 files changed, 71 insertions(+), 51 deletions(-)
 create mode 100644 advisories/github-reviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json
 delete mode 100644 advisories/unreviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json

diff --git a/advisories/github-reviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json b/advisories/github-reviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json
new file mode 100644
index 00000000000..1776b580ffb
--- /dev/null
+++ b/advisories/github-reviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json
@@ -0,0 +1,71 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hf3r-vmrv-7w29",
+  "modified": "2024-01-03T21:06:15Z",
+  "published": "2024-01-03T18:30:51Z",
+  "withdrawn": "2024-01-03T21:06:15Z",
+  "aliases": [
+    "CVE-2024-21909"
+  ],
+  "summary": "Duplicate Advisory: Denial of service in CBOR library",
+  "details": "### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-6r92-cgxc-r5fg. This link is maintained to preserve external references.\n\n### Original Description\nPeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of \nservice vulnerability. An attacker may trigger the denial of service \ncondition by providing crafted data to the DecodeFromBytes or other \ndecoding mechanisms in PeterO.Cbor. Depending on the usage of the \nlibrary, an unauthenticated and remote attacker may be able to cause the\n denial of service condition.\n",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "NuGet",
+        "name": "PeterO.Cbor"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "4.0.0"
+            },
+            {
+              "fixed": "4.5.1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/peteroupc/CBOR/security/advisories/GHSA-6r92-cgxc-r5fg"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21909"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/peteroupc/CBOR/commit/b4117dbbb4cd5a4a963f9d0c9aa132f033e15b95"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-6r92-cgxc-r5fg"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/peteroupc/CBOR/compare/v4.5...v4.5.1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-6r92-cgxc-r5fg"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-407"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-01-03T21:06:15Z",
+    "nvd_published_at": "2024-01-03T16:15:09Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json b/advisories/unreviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json
deleted file mode 100644
index a48087a3c44..00000000000
--- a/advisories/unreviewed/2024/01/GHSA-hf3r-vmrv-7w29/GHSA-hf3r-vmrv-7w29.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-hf3r-vmrv-7w29",
-  "modified": "2024-01-03T18:30:51Z",
-  "published": "2024-01-03T18:30:51Z",
-  "aliases": [
-    "CVE-2024-21909"
-  ],
-  "details": "PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of \nservice vulnerability. An attacker may trigger the denial of service \ncondition by providing crafted data to the DecodeFromBytes or other \ndecoding mechanisms in PeterO.Cbor. Depending on the usage of the \nlibrary, an unauthenticated and remote attacker may be able to cause the\n denial of service condition.\n",
-  "severity": [
-
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "WEB",
-      "url": "https://github.com/peteroupc/CBOR/security/advisories/GHSA-6r92-cgxc-r5fg"
-    },
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21909"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/peteroupc/CBOR/commit/b4117dbbb4cd5a4a963f9d0c9aa132f033e15b95"
-    },
-    {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-6r92-cgxc-r5fg"
-    },
-    {
-      "type": "WEB",
-      "url": "https://github.com/peteroupc/CBOR/compare/v4.5...v4.5.1"
-    },
-    {
-      "type": "WEB",
-      "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-6r92-cgxc-r5fg"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-407"
-    ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2024-01-03T16:15:09Z"
-  }
-}
\ No newline at end of file