Publish Advisories

GHSA-7945-5mcv-f2pp
GHSA-29wx-vh33-7x7r

advisories/github-reviewed/2024/03/GHSA-7945-5mcv-f2pp/GHSA-7945-5mcv-f2pp.json

@@ -1,10 +1,10 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7945-5mcv-f2pp",
-  "modified": "2024-03-08T17:33:46Z",
+  "modified": "2024-11-12T21:32:15Z",
   "published": "2024-03-08T17:33:46Z",
   "aliases": [
-
+    "CVE-2024-52296"
   ],
   "summary": "LibOSDP vulnerable to a null pointer deref in osdp_reply_name",
   "details": "### Issue:\nAt ospd_common.c, on the osdp_reply_name function, any reply id between REPLY_ACK and REPLY_XRD is valid, but names array do not declare all of the range. On a case of an undefined reply id within the range, name will be null (`name = names[reply_id - REPLY_ACK];`). Null name will casue a crash on next line: `if (name[0] == '\\0')` as null[0] is invalid.\n\n### Attack:\nAs this logic is not limited to a secure connection, attacker may trigger this vulnerability without any prior knowledge.\n\n### Impact\nDenial of Service\n\n### Patch\nThe issue has been patched in 24409e98a260176765956ec766a04cb35984fab1\n",
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/goToMain/libosdp/security/advisories/GHSA-7945-5mcv-f2pp"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52296"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/goToMain/libosdp/commit/24409e98a260176765956ec766a04cb35984fab1"
@@ -51,11 +55,11 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-476"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2024-03-08T17:33:46Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2024-11-12T16:15:26Z"
   }
 }

advisories/github-reviewed/2024/11/GHSA-29wx-vh33-7x7r/GHSA-29wx-vh33-7x7r.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-29wx-vh33-7x7r",
-  "modified": "2024-11-05T14:39:39Z",
+  "modified": "2024-11-12T21:32:34Z",
   "published": "2024-11-04T23:22:41Z",
   "aliases": [
     "CVE-2024-51744"
@@ -36,10 +36,7 @@
             }
           ]
         }
-      ],
-      "database_specific": {
-        "last_known_affected_version_range": "<= 4.5.0"
-      }
+      ]
     }
   ],
   "references": [