From 6b76e3ecc5691ee5f260f6b61711d36650316f34 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 15 Dec 2023 21:31:49 +0000 Subject: [PATCH] Publish Advisories GHSA-v5f6-hjmf-9mc5 GHSA-2cr6-32m2-cxhc GHSA-4x27-7f5c-rg8p GHSA-8g8w-39rg-5h28 GHSA-8hm7-v248-rjrv GHSA-f6m7-x69c-hp72 GHSA-gv3p-qv63-g8qx GHSA-gvp5-cq52-6qx5 --- .../GHSA-v5f6-hjmf-9mc5.json | 4 ++ .../GHSA-2cr6-32m2-cxhc.json | 42 +++++++++++++++++++ .../GHSA-4x27-7f5c-rg8p.json | 2 +- .../GHSA-8g8w-39rg-5h28.json | 2 +- .../GHSA-8hm7-v248-rjrv.json | 11 +++-- .../GHSA-f6m7-x69c-hp72.json | 35 ++++++++++++++++ .../GHSA-gv3p-qv63-g8qx.json | 2 +- .../GHSA-gvp5-cq52-6qx5.json | 2 +- 8 files changed, 92 insertions(+), 8 deletions(-) create mode 100644 advisories/unreviewed/2023/12/GHSA-2cr6-32m2-cxhc/GHSA-2cr6-32m2-cxhc.json create mode 100644 advisories/unreviewed/2023/12/GHSA-f6m7-x69c-hp72/GHSA-f6m7-x69c-hp72.json diff --git a/advisories/github-reviewed/2023/12/GHSA-v5f6-hjmf-9mc5/GHSA-v5f6-hjmf-9mc5.json b/advisories/github-reviewed/2023/12/GHSA-v5f6-hjmf-9mc5/GHSA-v5f6-hjmf-9mc5.json index e2369167f4e..d5da0b516f8 100644 --- a/advisories/github-reviewed/2023/12/GHSA-v5f6-hjmf-9mc5/GHSA-v5f6-hjmf-9mc5.json +++ b/advisories/github-reviewed/2023/12/GHSA-v5f6-hjmf-9mc5/GHSA-v5f6-hjmf-9mc5.json @@ -60,6 +60,10 @@ { "type": "PACKAGE", "url": "https://github.com/iterative/PyDrive2" + }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYR5SJKOFSSXFV3E3D2SLXBUBA5WMJJG/" } ], "database_specific": { diff --git a/advisories/unreviewed/2023/12/GHSA-2cr6-32m2-cxhc/GHSA-2cr6-32m2-cxhc.json b/advisories/unreviewed/2023/12/GHSA-2cr6-32m2-cxhc/GHSA-2cr6-32m2-cxhc.json new file mode 100644 index 00000000000..031fb9df335 --- /dev/null +++ b/advisories/unreviewed/2023/12/GHSA-2cr6-32m2-cxhc/GHSA-2cr6-32m2-cxhc.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2cr6-32m2-cxhc", + "modified": "2023-12-15T21:30:29Z", + "published": "2023-12-15T21:30:29Z", + "aliases": [ + "CVE-2023-4020" + ], + "details": "An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4020" + }, + { + "type": "WEB", + "url": "https://community.silabs.com/069Vm0000004b95IAA" + }, + { + "type": "WEB", + "url": "https://github.com/SiliconLabs/gecko_sdk/releases" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2023-12-15T21:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/12/GHSA-4x27-7f5c-rg8p/GHSA-4x27-7f5c-rg8p.json b/advisories/unreviewed/2023/12/GHSA-4x27-7f5c-rg8p/GHSA-4x27-7f5c-rg8p.json index 81ad1cffe8a..7359a068e1a 100644 --- a/advisories/unreviewed/2023/12/GHSA-4x27-7f5c-rg8p/GHSA-4x27-7f5c-rg8p.json +++ b/advisories/unreviewed/2023/12/GHSA-4x27-7f5c-rg8p/GHSA-4x27-7f5c-rg8p.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-367" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/12/GHSA-8g8w-39rg-5h28/GHSA-8g8w-39rg-5h28.json b/advisories/unreviewed/2023/12/GHSA-8g8w-39rg-5h28/GHSA-8g8w-39rg-5h28.json index 7b3fd556710..359dafcaf32 100644 --- a/advisories/unreviewed/2023/12/GHSA-8g8w-39rg-5h28/GHSA-8g8w-39rg-5h28.json +++ b/advisories/unreviewed/2023/12/GHSA-8g8w-39rg-5h28/GHSA-8g8w-39rg-5h28.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/12/GHSA-8hm7-v248-rjrv/GHSA-8hm7-v248-rjrv.json b/advisories/unreviewed/2023/12/GHSA-8hm7-v248-rjrv/GHSA-8hm7-v248-rjrv.json index 864d39c60da..20a32d394a3 100644 --- a/advisories/unreviewed/2023/12/GHSA-8hm7-v248-rjrv/GHSA-8hm7-v248-rjrv.json +++ b/advisories/unreviewed/2023/12/GHSA-8hm7-v248-rjrv/GHSA-8hm7-v248-rjrv.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8hm7-v248-rjrv", - "modified": "2023-12-13T03:31:55Z", + "modified": "2023-12-15T21:30:28Z", "published": "2023-12-13T03:31:55Z", "aliases": [ "CVE-2023-47573" ], "details": "An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-13T02:15:07Z" diff --git a/advisories/unreviewed/2023/12/GHSA-f6m7-x69c-hp72/GHSA-f6m7-x69c-hp72.json b/advisories/unreviewed/2023/12/GHSA-f6m7-x69c-hp72/GHSA-f6m7-x69c-hp72.json new file mode 100644 index 00000000000..e2034cc730e --- /dev/null +++ b/advisories/unreviewed/2023/12/GHSA-f6m7-x69c-hp72/GHSA-f6m7-x69c-hp72.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f6m7-x69c-hp72", + "modified": "2023-12-15T21:30:29Z", + "published": "2023-12-15T21:30:29Z", + "aliases": [ + "CVE-2023-50469" + ], + "details": "Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at /apply.cgi.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50469" + }, + { + "type": "WEB", + "url": "https://github.com/forever-more-cjy/overflow/blob/main/LBT-T310%20Buffer%20overflow.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2023-12-15T21:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/12/GHSA-gv3p-qv63-g8qx/GHSA-gv3p-qv63-g8qx.json b/advisories/unreviewed/2023/12/GHSA-gv3p-qv63-g8qx/GHSA-gv3p-qv63-g8qx.json index 2814fde9acf..66fc4ed8dcf 100644 --- a/advisories/unreviewed/2023/12/GHSA-gv3p-qv63-g8qx/GHSA-gv3p-qv63-g8qx.json +++ b/advisories/unreviewed/2023/12/GHSA-gv3p-qv63-g8qx/GHSA-gv3p-qv63-g8qx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gv3p-qv63-g8qx", - "modified": "2023-12-13T09:30:32Z", + "modified": "2023-12-15T21:30:28Z", "published": "2023-12-13T09:30:32Z", "aliases": [ "CVE-2023-40716" diff --git a/advisories/unreviewed/2023/12/GHSA-gvp5-cq52-6qx5/GHSA-gvp5-cq52-6qx5.json b/advisories/unreviewed/2023/12/GHSA-gvp5-cq52-6qx5/GHSA-gvp5-cq52-6qx5.json index fdeb9a3fef8..cc38a1969c3 100644 --- a/advisories/unreviewed/2023/12/GHSA-gvp5-cq52-6qx5/GHSA-gvp5-cq52-6qx5.json +++ b/advisories/unreviewed/2023/12/GHSA-gvp5-cq52-6qx5/GHSA-gvp5-cq52-6qx5.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-362" ], "severity": "MODERATE", "github_reviewed": false,