From 53d2d111fe5b0fbe46f0c29c4692aae1748e8185 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 29 Apr 2025 12:31:58 +0000 Subject: [PATCH] Publish Advisories GHSA-274g-94c9-xmph GHSA-487w-xx5j-gqwc GHSA-6qwv-wfwp-j22f GHSA-6v8p-jmjg-q3g9 GHSA-fpwr-67px-3qhx GHSA-jgvv-fw39-8435 GHSA-v96g-5j57-774c --- .../GHSA-274g-94c9-xmph.json | 37 ++++++++++++ .../GHSA-487w-xx5j-gqwc.json | 36 ++++++++++++ .../GHSA-6qwv-wfwp-j22f.json | 56 +++++++++++++++++++ .../GHSA-6v8p-jmjg-q3g9.json | 52 +++++++++++++++++ .../GHSA-fpwr-67px-3qhx.json | 40 +++++++++++++ .../GHSA-jgvv-fw39-8435.json | 36 ++++++++++++ .../GHSA-v96g-5j57-774c.json | 40 +++++++++++++ 7 files changed, 297 insertions(+) create mode 100644 advisories/unreviewed/2025/04/GHSA-274g-94c9-xmph/GHSA-274g-94c9-xmph.json create mode 100644 advisories/unreviewed/2025/04/GHSA-487w-xx5j-gqwc/GHSA-487w-xx5j-gqwc.json create mode 100644 advisories/unreviewed/2025/04/GHSA-6qwv-wfwp-j22f/GHSA-6qwv-wfwp-j22f.json create mode 100644 advisories/unreviewed/2025/04/GHSA-6v8p-jmjg-q3g9/GHSA-6v8p-jmjg-q3g9.json create mode 100644 advisories/unreviewed/2025/04/GHSA-fpwr-67px-3qhx/GHSA-fpwr-67px-3qhx.json create mode 100644 advisories/unreviewed/2025/04/GHSA-jgvv-fw39-8435/GHSA-jgvv-fw39-8435.json create mode 100644 advisories/unreviewed/2025/04/GHSA-v96g-5j57-774c/GHSA-v96g-5j57-774c.json diff --git a/advisories/unreviewed/2025/04/GHSA-274g-94c9-xmph/GHSA-274g-94c9-xmph.json b/advisories/unreviewed/2025/04/GHSA-274g-94c9-xmph/GHSA-274g-94c9-xmph.json new file mode 100644 index 00000000000..e7ecc1f3b94 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-274g-94c9-xmph/GHSA-274g-94c9-xmph.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-274g-94c9-xmph", + "modified": "2025-04-29T12:30:21Z", + "published": "2025-04-29T12:30:21Z", + "aliases": [ + "CVE-2024-58099" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame\n\nAndrew and Nikolay reported connectivity issues with Cilium's service\nload-balancing in case of vmxnet3.\n\nIf a BPF program for native XDP adds an encapsulation header such as\nIPIP and transmits the packet out the same interface, then in case\nof vmxnet3 a corrupted packet is being sent and subsequently dropped\non the path.\n\nvmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp()\nthrough vmxnet3_xdp_xmit_back() calculates an incorrect DMA address:\n\n page = virt_to_page(xdpf->data);\n tbi->dma_addr = page_pool_get_dma_addr(page) +\n VMXNET3_XDP_HEADROOM;\n dma_sync_single_for_device(&adapter->pdev->dev,\n tbi->dma_addr, buf_size,\n DMA_TO_DEVICE);\n\nThe above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP\nBPF program could have moved xdp->data. While the passed buf_size is\ncorrect (xdpf->len), the dma_addr needs to have a dynamic offset which\ncan be calculated as xdpf->data - (void *)xdpf, that is, xdp->data -\nxdp->data_hard_start.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58099" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4678adf94da4a9e9683817b246b58ce15fb81782" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/59ba6cdadb9c26b606a365eb9c9b25eb2052622d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f82eb34fb59a8fb96c19f4f492c20eb774140bb5" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-29T12:15:31Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-487w-xx5j-gqwc/GHSA-487w-xx5j-gqwc.json b/advisories/unreviewed/2025/04/GHSA-487w-xx5j-gqwc/GHSA-487w-xx5j-gqwc.json new file mode 100644 index 00000000000..cc32cd7ac3e --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-487w-xx5j-gqwc/GHSA-487w-xx5j-gqwc.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-487w-xx5j-gqwc", + "modified": "2025-04-29T12:30:21Z", + "published": "2025-04-29T12:30:21Z", + "aliases": [ + "CVE-2025-30194" + ], + "details": "When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access (double-free) and crash of DNSdist, causing a denial of service.\n\nThe remedy is: upgrade to the patched 1.9.9 version.\n\nA workaround is to temporarily switch to the h2o provider until DNSdist has been upgraded to a fixed version.\n\nWe would like to thank Charles Howes for bringing this issue to our attention.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30194" + }, + { + "type": "WEB", + "url": "https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-02.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-29T12:15:31Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-6qwv-wfwp-j22f/GHSA-6qwv-wfwp-j22f.json b/advisories/unreviewed/2025/04/GHSA-6qwv-wfwp-j22f/GHSA-6qwv-wfwp-j22f.json new file mode 100644 index 00000000000..9e275770889 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-6qwv-wfwp-j22f/GHSA-6qwv-wfwp-j22f.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6qwv-wfwp-j22f", + "modified": "2025-04-29T12:30:21Z", + "published": "2025-04-29T12:30:21Z", + "aliases": [ + "CVE-2025-4059" + ], + "details": "A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the component Prison_Mgmt_Sys. The manipulation of the argument filename leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4059" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://github.com/zzzxc643/cve/blob/main/Prison_Mgmt_Sys.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.306496" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.306496" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.559359" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-29T12:15:32Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-6v8p-jmjg-q3g9/GHSA-6v8p-jmjg-q3g9.json b/advisories/unreviewed/2025/04/GHSA-6v8p-jmjg-q3g9/GHSA-6v8p-jmjg-q3g9.json new file mode 100644 index 00000000000..ebedff886e9 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-6v8p-jmjg-q3g9/GHSA-6v8p-jmjg-q3g9.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6v8p-jmjg-q3g9", + "modified": "2025-04-29T12:30:21Z", + "published": "2025-04-29T12:30:21Z", + "aliases": [ + "CVE-2025-4058" + ], + "details": "A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4058" + }, + { + "type": "WEB", + "url": "https://github.com/hhhanxx/attack/issues/2#issue-2998883562" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.306495" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.306495" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.559354" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-29T12:15:32Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-fpwr-67px-3qhx/GHSA-fpwr-67px-3qhx.json b/advisories/unreviewed/2025/04/GHSA-fpwr-67px-3qhx/GHSA-fpwr-67px-3qhx.json new file mode 100644 index 00000000000..edff4a3d141 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fpwr-67px-3qhx/GHSA-fpwr-67px-3qhx.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fpwr-67px-3qhx", + "modified": "2025-04-29T12:30:21Z", + "published": "2025-04-29T12:30:21Z", + "aliases": [ + "CVE-2025-1194" + ], + "details": "A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.48.1 (latest).", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1194" + }, + { + "type": "WEB", + "url": "https://github.com/huggingface/transformers/commit/92c5ca9dd70de3ade2af2eb835c96215cc50e815" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/86f58dcd-683f-4adc-a735-849f51e9abb2" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1333" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-29T12:15:31Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-jgvv-fw39-8435/GHSA-jgvv-fw39-8435.json b/advisories/unreviewed/2025/04/GHSA-jgvv-fw39-8435/GHSA-jgvv-fw39-8435.json new file mode 100644 index 00000000000..000e08af789 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-jgvv-fw39-8435/GHSA-jgvv-fw39-8435.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jgvv-fw39-8435", + "modified": "2025-04-29T12:30:21Z", + "published": "2025-04-29T12:30:21Z", + "aliases": [ + "CVE-2025-3929" + ], + "details": "An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window, and access user data.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3929" + }, + { + "type": "WEB", + "url": "https://mdaemon.com/pages/downloads-critical-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-29T12:15:32Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-v96g-5j57-774c/GHSA-v96g-5j57-774c.json b/advisories/unreviewed/2025/04/GHSA-v96g-5j57-774c/GHSA-v96g-5j57-774c.json new file mode 100644 index 00000000000..d19aa2ffa69 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-v96g-5j57-774c/GHSA-v96g-5j57-774c.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v96g-5j57-774c", + "modified": "2025-04-29T12:30:21Z", + "published": "2025-04-29T12:30:21Z", + "aliases": [ + "CVE-2025-3891" + ], + "details": "A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3891" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2025-3891" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2361633" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-248" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-29T12:15:32Z" + } +} \ No newline at end of file