netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-287q-jfcp-9vhv
GHSA-pjx4-3f3p-29v3
GHSA-488m-w9fp-5mm2
GHSA-488m-w9fp-5mm2
This commit is contained in:
advisory-database[bot]
2024-09-16 21:39:44 +00:00
parent d41eefb4f3
commit 5e95220be3
4 changed files with 115 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/12/GHSA-287q-jfcp-9vhv/GHSA-287q-jfcp-9vhv.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-287q-jfcp-9vhv",
"modified": "2022-12-21T16:13:03Z",
"modified": "2024-09-16T21:38:52Z",
"published": "2022-12-15T21:30:26Z",
"aliases": [
"CVE-2022-4526"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
advisories/github-reviewed/2023/01/GHSA-pjx4-3f3p-29v3/GHSA-pjx4-3f3p-29v3.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pjx4-3f3p-29v3",
"modified": "2023-01-11T20:54:03Z",
"modified": "2024-09-16T21:38:14Z",
"published": "2023-01-05T09:30:27Z",
"aliases": [
"CVE-2016-15010"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
@@ -44,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/uisautomation/django-ucamlookup/commit/5e25e4765637ea4b9e0bf5fcd5e9a922abee7eb3"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/django-ucamlookup/PYSEC-2023-14.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/uisautomation/django-ucamlookup"
advisories/github-reviewed/2023/12/GHSA-488m-w9fp-5mm2/GHSA-488m-w9fp-5mm2.json
+101
View File
@@ -0,0 +1,101 @@
{
"schema_version": "1.4.0",
"id": "GHSA-488m-w9fp-5mm2",
"modified": "2024-09-16T21:37:34Z",
"published": "2023-12-28T21:30:37Z",
"aliases": [
"CVE-2023-5236"
],
"summary": "Infinispan circular object references causes out of memory errors",
"details": "A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.infinispan.protostream:protostream"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.6.2.Final"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5236"
},
{
"type": "WEB",
"url": "https://github.com/infinispan/protostream/commit/4501b6b307a6bab545346f66238f8be7e42f83eb"
},
{
"type": "WEB",
"url": "https://github.com/infinispan/protostream/commit/4ef66958f2c4890ae1c6a7acd629d27bd88aa4cb"
},
{
"type": "WEB",
"url": "https://github.com/infinispan/protostream/commit/50320b5987dc87bc04b616b87e8cf93472ee19c1"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2023:5396"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-5236"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240999"
},
{
"type": "PACKAGE",
"url": "https://github.com/infinispan/infinispan"
},
{
"type": "WEB",
"url": "https://issues.redhat.com/browse/IPROTO-262"
},
{
"type": "WEB",
"url": "https://issues.redhat.com/browse/IPROTO-263"
},
{
"type": "WEB",
"url": "https://issues.redhat.com/browse/ISPN-14534"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240125-0004"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1047"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-09-16T21:37:34Z",
"nvd_published_at": "2023-12-18T14:15:10Z"
}
}
advisories/unreviewed/2023/12/GHSA-488m-w9fp-5mm2/GHSA-488m-w9fp-5mm2.json
-50
View File
@@ -1,50 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-488m-w9fp-5mm2",
"modified": "2024-09-16T14:37:22Z",
"published": "2023-12-28T21:30:37Z",
"aliases": [
"CVE-2023-5236"
],
"details": "A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5236"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2023:5396"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-5236"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240999"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240125-0004"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1047"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-12-18T14:15:10Z"
}
}