diff --git a/advisories/unreviewed/2022/05/GHSA-3vj4-cvjp-482h/GHSA-3vj4-cvjp-482h.json b/advisories/github-reviewed/2022/05/GHSA-3vj4-cvjp-482h/GHSA-3vj4-cvjp-482h.json similarity index 55% rename from advisories/unreviewed/2022/05/GHSA-3vj4-cvjp-482h/GHSA-3vj4-cvjp-482h.json rename to advisories/github-reviewed/2022/05/GHSA-3vj4-cvjp-482h/GHSA-3vj4-cvjp-482h.json index f2e21be8462..119baf2d918 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vj4-cvjp-482h/GHSA-3vj4-cvjp-482h.json +++ b/advisories/github-reviewed/2022/05/GHSA-3vj4-cvjp-482h/GHSA-3vj4-cvjp-482h.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-3vj4-cvjp-482h", - "modified": "2025-04-12T13:01:17Z", + "modified": "2025-04-14T21:03:46Z", "published": "2022-05-14T02:19:49Z", "aliases": [ "CVE-2015-8914" ], + "summary": "OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism", "details": "The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.", "severity": [ { @@ -13,12 +14,59 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "neutron" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "7.0.5" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "neutron" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + }, + { + "fixed": "8.1.1" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8914" }, + { + "type": "WEB", + "url": "https://github.com/openstack/neutron/commit/1d1159bb2b57f0b4193f8666f53736f05bf7eac9" + }, + { + "type": "WEB", + "url": "https://github.com/openstack/neutron/commit/3e66b1a87544d7a127abceec13bfeacb8f18f7e1" + }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2016:1473" @@ -31,6 +79,10 @@ "type": "WEB", "url": "https://bugs.launchpad.net/neutron/+bug/1502933" }, + { + "type": "PACKAGE", + "url": "https://github.com/openstack/neutron" + }, { "type": "WEB", "url": "https://review.openstack.org/#/c/300233" @@ -57,10 +109,12 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-923" + ], "severity": "CRITICAL", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-04-14T21:03:46Z", "nvd_published_at": "2016-06-17T15:59:00Z" } } \ No newline at end of file diff --git a/advisories/github-reviewed/2022/05/GHSA-qpwc-p365-pqrr/GHSA-qpwc-p365-pqrr.json b/advisories/github-reviewed/2022/05/GHSA-qpwc-p365-pqrr/GHSA-qpwc-p365-pqrr.json index b86a96ae811..c4605c1b8ff 100644 --- a/advisories/github-reviewed/2022/05/GHSA-qpwc-p365-pqrr/GHSA-qpwc-p365-pqrr.json +++ b/advisories/github-reviewed/2022/05/GHSA-qpwc-p365-pqrr/GHSA-qpwc-p365-pqrr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qpwc-p365-pqrr", - "modified": "2025-04-14T20:58:57Z", + "modified": "2025-04-14T21:05:49Z", "published": "2022-05-14T02:19:49Z", "aliases": [ "CVE-2016-5362" @@ -28,7 +28,7 @@ "introduced": "0" }, { - "last_affected": "7.0.4" + "fixed": "7.0.5" } ] } @@ -47,7 +47,7 @@ "introduced": "8.0.0" }, { - "last_affected": "8.1.0" + "fixed": "8.1.1" } ] }