netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-10-21 21:32:02 +00:00
parent 677667b66d
commit 4ceec68b3d
196 changed files with 8611 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/07/GHSA-r38r-qp28-2m63/GHSA-r38r-qp28-2m63.json
+6 -12
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r38r-qp28-2m63",
"modified": "2023-08-23T22:21:00Z",
"modified": "2024-10-21T21:29:55Z",
"published": "2018-07-26T16:08:49Z",
"aliases": [
"CVE-2014-3539"
@@ -20,16 +20,6 @@
"ecosystem": "PyPI",
"name": "rope"
},
"ecosystem_specific": {
"affected_functions": [
"rope.base.oi.doa._SocketReceiver.__init__",
"rope.base.oi.doa._SocketReceiver.get_send_info",
"rope.base.oi.doa._SocketReceiver.receive_data",
"rope.base.oi.runmod._SocketSender.__init__",
"rope.base.oi.runmod._SocketSender.send_data",
"rope.base.oi.runmod._FunctionCallDataSender.__init__"
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -58,6 +48,10 @@
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1116485"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/rope/PYSEC-2018-100.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/python-rope/rope"
@@ -69,7 +63,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": "CRITICAL",
"github_reviewed": true,
advisories/github-reviewed/2022/05/GHSA-hvmj-356c-gpf4/GHSA-hvmj-356c-gpf4.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hvmj-356c-gpf4",
"modified": "2024-04-30T08:34:20Z",
"modified": "2024-10-21T21:30:27Z",
"published": "2022-05-17T03:00:54Z",
"aliases": [
"CVE-2016-9639"
@@ -48,6 +48,10 @@
"type": "WEB",
"url": "https://docs.saltstack.com/en/2015.8/ref/configuration/master.html#rotate-aes-key"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2017-34.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/saltstack/salt"
advisories/unreviewed/2023/09/GHSA-6v8g-6c3c-q9vw/GHSA-6v8g-6c3c-q9vw.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6v8g-6c3c-q9vw",
"modified": "2024-04-04T07:24:51Z",
"modified": "2024-10-21T21:30:47Z",
"published": "2023-09-04T03:30:20Z",
"aliases": [
"CVE-2023-20842"
advisories/unreviewed/2024/02/GHSA-3wgr-c9q2-xcp3/GHSA-3wgr-c9q2-xcp3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3wgr-c9q2-xcp3",
"modified": "2024-02-14T00:35:42Z",
"modified": "2024-10-21T21:30:48Z",
"published": "2024-02-14T00:35:42Z",
"aliases": [
"CVE-2023-38960"
],
"details": "Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-13T23:15:08Z"
advisories/unreviewed/2024/02/GHSA-895f-2fwm-hcv8/GHSA-895f-2fwm-hcv8.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
"CWE-269",
"CWE-352"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-cqc2-xcqm-6c3r/GHSA-cqc2-xcqm-6c3r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cqc2-xcqm-6c3r",
"modified": "2024-02-13T18:38:23Z",
"modified": "2024-10-21T21:30:48Z",
"published": "2024-02-13T18:38:23Z",
"aliases": [
"CVE-2023-26562"
],
"details": "In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messages when configured for Imap/smtp.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-13T16:15:08Z"
advisories/unreviewed/2024/07/GHSA-29qw-fxp9-wj84/GHSA-29qw-fxp9-wj84.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29qw-fxp9-wj84",
"modified": "2024-07-17T00:32:54Z",
"modified": "2024-10-21T21:30:48Z",
"published": "2024-07-17T00:32:53Z",
"aliases": [
"CVE-2019-25154"
],
"details": "Inappropriate implementation in iframe in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T23:15:10Z"
advisories/unreviewed/2024/10/GHSA-22xm-p789-9hfc/GHSA-22xm-p789-9hfc.json
+47
View File
@@ -0,0 +1,47 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22xm-p789-9hfc",
"modified": "2024-10-21T21:30:52Z",
"published": "2024-10-21T21:30:52Z",
"aliases": [
"CVE-2022-49028"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nixgbevf: Fix resource leak in ixgbevf_init_module()\n\nixgbevf_init_module() won't destroy the workqueue created by\ncreate_singlethread_workqueue() when pci_register_driver() failed. Add\ndestroy_workqueue() in fail path to prevent the resource leak.\n\nSimilar to the handling of u132_hcd_init in commit f276e002793c\n(\"usb: u132-hcd: fix resource leak\")",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49028"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/7109e941099244cc876a4b3cb7a3ec79f104374a"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/8cfa238a48f34038464b99d0b4825238c2687181"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c99671d4699dcf90d6939923c8fe8a8918e140b2"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/f166c62cad798c53300b4b327e44300c73ec492d"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:13Z"
}
}
advisories/unreviewed/2024/10/GHSA-23wv-w3v2-hcrj/GHSA-23wv-w3v2-hcrj.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-23wv-w3v2-hcrj",
"modified": "2024-10-21T21:30:49Z",
"published": "2024-10-21T21:30:49Z",
"aliases": [
"CVE-2024-46238"
],
"details": "Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46238"
},
{
"type": "WEB",
"url": "https://github.com/anoncoder01/PHP_Gurukul_Hospital_Management_System_XSS/blob/master/vulnerabilities/XSS2.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T19:15:03Z"
}
}
advisories/unreviewed/2024/10/GHSA-2482-hx3h-75g4/GHSA-2482-hx3h-75g4.json
+43
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/10/GHSA-2645-7hqp-7qr7/GHSA-2645-7hqp-7qr7.json
+63
View File
@@ -0,0 +1,63 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2645-7hqp-7qr7",
"modified": "2024-10-21T21:30:51Z",
"published": "2024-10-21T21:30:51Z",
"aliases": [
"CVE-2022-48967"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: nci: Bounds check struct nfc_target arrays\n\nWhile running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported:\n\n memcpy: detected field-spanning write (size 129) of single field \"target->sensf_res\" at net/nfc/nci/ntf.c:260 (size 18)\n\nThis appears to be a legitimate lack of bounds checking in\nnci_add_new_protocol(). Add the missing checks.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48967"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/27eb2d7a1b9987b6d0429b7716b1ff3b82c4ffc9"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6778434706940b8fad7ef35f410d2b9929f256d2"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6b37f0dc0638d13a006f2f24d2f6ca61e83bc714"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/908b2da426fe9c3ce74cf541ba40e7a4251db191"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/cff35329070b96b4484d23f9f48a5ca2c947e750"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/dbdcfb9f6748218a149f62468d6297ce3f014e9c"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/e329e71013c9b5a4535b099208493c7826ee4a64"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/f41547546db9af99da2c34e3368664d7a79cefae"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:08Z"
}
}
advisories/unreviewed/2024/10/GHSA-29wh-8w97-366v/GHSA-29wh-8w97-366v.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29wh-8w97-366v",
"modified": "2024-10-21T21:30:51Z",
"published": "2024-10-21T21:30:51Z",
"aliases": [
"CVE-2022-48989"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfscache: Fix oops due to race with cookie_lru and use_cookie\n\nIf a cookie expires from the LRU and the LRU_DISCARD flag is set, but\nthe state machine has not run yet, it's possible another thread can call\nfscache_use_cookie and begin to use it.\n\nWhen the cookie_worker finally runs, it will see the LRU_DISCARD flag\nset, transition the cookie->state to LRU_DISCARDING, which will then\nwithdraw the cookie. Once the cookie is withdrawn the object is removed\nthe below oops will occur because the object associated with the cookie\nis now NULL.\n\nFix the oops by clearing the LRU_DISCARD bit if another thread uses the\ncookie before the cookie_worker runs.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000008\n ...\n CPU: 31 PID: 44773 Comm: kworker/u130:1 Tainted: G E 6.0.0-5.dneg.x86_64 #1\n Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022\n Workqueue: events_unbound netfs_rreq_write_to_cache_work [netfs]\n RIP: 0010:cachefiles_prepare_write+0x28/0x90 [cachefiles]\n ...\n Call Trace:\n netfs_rreq_write_to_cache_work+0x11c/0x320 [netfs]\n process_one_work+0x217/0x3e0\n worker_thread+0x4a/0x3b0\n kthread+0xd6/0x100",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48989"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/37f0b459c9b67e14fe4dcc3a15d286c4436ed01d"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/b5b52de3214a29911f949459a79f6640969b5487"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:10Z"
}
}
advisories/unreviewed/2024/10/GHSA-2fm5-x4wv-3p5g/GHSA-2fm5-x4wv-3p5g.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2fm5-x4wv-3p5g",
"modified": "2024-10-21T21:30:50Z",
"published": "2024-10-21T21:30:50Z",
"aliases": [
"CVE-2022-48957"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()\n\nThe cmd_buff needs to be freed when error happened in\ndpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove().",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48957"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/4fad22a1281c500f15b172c9d261eff347ca634b"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/54d830e24247fa8361b016dd2069362866f45cb6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/785ee7a82297e1512d9061aae91699212ed65796"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:07Z"
}
}
advisories/unreviewed/2024/10/GHSA-2jwm-7wcx-f364/GHSA-2jwm-7wcx-f364.json
+63
View File
@@ -0,0 +1,63 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2jwm-7wcx-f364",
"modified": "2024-10-21T21:30:50Z",
"published": "2024-10-21T21:30:50Z",
"aliases": [
"CVE-2022-48949"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Initialize mailbox message for VF reset\n\nWhen a MAC address is not assigned to the VF, that portion of the message\nsent to the VF is not set. The memory, however, is allocated from the\nstack meaning that information may be leaked to the VM. Initialize the\nmessage buffer to 0 so that no information is passed to the VM in this\ncase.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48949"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/367e1e3399dbc56fc669740c4ab60e35da632b0e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/51fd5ede7ed42f272682a0c33d6f0767b3484a3d"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/a6629659af3f5c6a91e3914ea62554c975ab77f4"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c383c7c35c7bc15e07a04eefa060a8a80cbeae29"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c581439a977545d61849a72e8ed631cfc8a2a3c1"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/de5dc44370fbd6b46bd7f1a1e00369be54a041c8"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/ef1d739dd1f362aec081278ff92f943c31eb177a"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/f2479c3daaabccbac6c343a737615d0c595c6dc4"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:06Z"
}
}
advisories/unreviewed/2024/10/GHSA-2mfj-xm96-46wm/GHSA-2mfj-xm96-46wm.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mfj-xm96-46wm",
"modified": "2024-10-21T21:30:53Z",
"published": "2024-10-21T21:30:53Z",
"aliases": [
"CVE-2024-50020"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()\n\nThis patch addresses an issue with improper reference count handling in the\nice_sriov_set_msix_vec_count() function.\n\nFirst, the function calls ice_get_vf_by_id(), which increments the\nreference count of the vf pointer. If the subsequent call to\nice_get_vf_vsi() fails, the function currently returns an error without\ndecrementing the reference count of the vf pointer, leading to a reference\ncount leak. The correct behavior, as implemented in this patch, is to\ndecrement the reference count using ice_put_vf(vf) before returning an\nerror when vsi is NULL.\n\nSecond, the function calls ice_sriov_get_irqs(), which sets\nvf->first_vector_idx. If this call returns a negative value, indicating an\nerror, the function returns an error without decrementing the reference\ncount of the vf pointer, resulting in another reference count leak. The\npatch addresses this by adding a call to ice_put_vf(vf) before returning\nan error when vf->first_vector_idx < 0.\n\nThis bug was identified by an experimental static analysis tool developed\nby our team. The tool specializes in analyzing reference count operations\nand identifying potential mismanagement of reference counts. In this case,\nthe tool flagged the missing decrement operation as a potential issue,\nleading to this patch.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50020"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/416dbb815ca69684de148328990ba0ec53e6dbc1"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/d517cf89874c6039e6294b18d66f40988e62502a"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:15Z"
}
}
advisories/unreviewed/2024/10/GHSA-33jj-pgpw-2mqq/GHSA-33jj-pgpw-2mqq.json
+47
View File
@@ -0,0 +1,47 @@
{
"schema_version": "1.4.0",
"id": "GHSA-33jj-pgpw-2mqq",
"modified": "2024-10-21T21:30:50Z",
"published": "2024-10-21T21:30:50Z",
"aliases": [
"CVE-2022-48952"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mt7621: Add sentinel to quirks table\n\nCurrent driver is missing a sentinel in the struct soc_device_attribute\narray, which causes an oops when assessed by the\nsoc_device_match(mt7621_pcie_quirks_match) call.\n\nThis was only exposed once the CONFIG_SOC_MT7621 mt7621 soc_dev_attr\nwas fixed to register the SOC as a device, in:\n\ncommit 7c18b64bba3b (\"mips: ralink: mt7621: do not use kzalloc too early\")\n\nFix it by adding the required sentinel.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48952"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/19098934f910b4d47cb30251dd39ffa57bef9523"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/3e9c395ef2d52975b2c2894d2da09d6db2958bc6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/a4997bae1b5b012c8a6e2643e26578a7bc2cae36"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/cb7323ece786f243f6d6ccf2e5b2b27b736bdc04"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:06Z"
}
}
advisories/unreviewed/2024/10/GHSA-3fj9-rv52-g5r6/GHSA-3fj9-rv52-g5r6.json
+67
View File
@@ -0,0 +1,67 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3fj9-rv52-g5r6",
"modified": "2024-10-21T21:30:50Z",
"published": "2024-10-21T21:30:50Z",
"aliases": [
"CVE-2022-48946"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Fix preallocation discarding at indirect extent boundary\n\nWhen preallocation extent is the first one in the extent block, the\ncode would corrupt extent tree header instead. Fix the problem and use\nudf_delete_aext() for deleting extent to avoid some code duplication.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48946"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/1a075f4a549481ce6e8518d8379f193ccec6b746"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/4d835efd561dfb9bf5409f11f4ecd428d5d29226"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/63dbbd8f1499b0a161e701a04aa50148d60bd1f7"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/72f651c96c8aadf087fd782d551bf7db648a8c2e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/7665857f88557c372da35534165721156756f77f"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/ae56d9a017724f130cf1a263dd82a78d2a6e3852"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T20:15:06Z"
}
}
advisories/unreviewed/2024/10/GHSA-3fxp-j2vr-qqgv/GHSA-3fxp-j2vr-qqgv.json
+51
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/10/GHSA-3h7p-fxxx-92w8/GHSA-3h7p-fxxx-92w8.json
+55
View File
@@ -0,0 +1,55 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3h7p-fxxx-92w8",
"modified": "2024-10-21T21:30:49Z",
"published": "2024-10-21T21:30:49Z",
"aliases": [
"CVE-2024-50003"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix system hang while resume with TBT monitor\n\n[Why]\nConnected with a Thunderbolt monitor and do the suspend and the system\nmay hang while resume.\n\nThe TBT monitor HPD will be triggered during the resume procedure\nand call the drm_client_modeset_probe() while\nstruct drm_connector connector->dev->master is NULL.\n\nIt will mess up the pipe topology after resume.\n\n[How]\nSkip the TBT monitor HPD during the resume procedure because we\ncurrently will probe the connectors after resume by default.\n\n(cherry picked from commit 453f86a26945207a16b8f66aaed5962dc2b95b85)",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50003"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/52d4e3fb3d340447dcdac0e14ff21a764f326907"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/68d603f467a75618eeae5bfe8af32cda47097010"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/722d2d8fc423108597b97efbf165187d16d9aa1e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/73e441be033d3ed0bdff09b575da3e7d4606ffc9"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c2356296f546326f9f06c109e201d42201e1e783"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/eb9329cd882aa274e92bdb1003bc088433fdee86"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-21T19:15:04Z"
}
}
advisories/unreviewed/2024/10/GHSA-3qfw-5g24-8pmq/GHSA-3qfw-5g24-8pmq.json
+1
View File
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-331",
"CWE-340"
],
"severity": "CRITICAL",

Some files were not shown because too many files have changed in this diff Show More