diff --git a/advisories/github-reviewed/2018/08/GHSA-5mjw-6jrh-hvfq/GHSA-5mjw-6jrh-hvfq.json b/advisories/github-reviewed/2018/08/GHSA-5mjw-6jrh-hvfq/GHSA-5mjw-6jrh-hvfq.json index 718f2c61394..823c645be38 100644 --- a/advisories/github-reviewed/2018/08/GHSA-5mjw-6jrh-hvfq/GHSA-5mjw-6jrh-hvfq.json +++ b/advisories/github-reviewed/2018/08/GHSA-5mjw-6jrh-hvfq/GHSA-5mjw-6jrh-hvfq.json @@ -8,9 +8,7 @@ ], "summary": "Sandbox Breakout / Arbitrary Code Execution in static-eval", "details": "Affected versions of `static-eval` pass untrusted user input directly to the global function constructor, resulting in an arbitrary code execution vulnerability when user input is parsed via the package.\n\n## Proof of concept\n```js\nvar evaluate = require('static-eval');\nvar parse = require('esprima').parse;\nvar src = '(function(){console.log(process.pid)})()';\nvar ast = parse(src).body[0].expression;\nvar res = evaluate(ast, {});\n// Will print the process id\n```\n\n\n## Recommendation\n\nUpdate to version 2.0.0 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2018/10/GHSA-cgjx-mwpx-47jv/GHSA-cgjx-mwpx-47jv.json b/advisories/github-reviewed/2018/10/GHSA-cgjx-mwpx-47jv/GHSA-cgjx-mwpx-47jv.json index 957c0abab3e..ddb188c5baa 100644 --- a/advisories/github-reviewed/2018/10/GHSA-cgjx-mwpx-47jv/GHSA-cgjx-mwpx-47jv.json +++ b/advisories/github-reviewed/2018/10/GHSA-cgjx-mwpx-47jv/GHSA-cgjx-mwpx-47jv.json @@ -8,9 +8,7 @@ ], "summary": "Private Data Disclosure in express-restify-mongoose", "details": "Affected versions of `express-restify-mongoose` are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private.\n\n\n## Proof of Concept\n\nIf you have a user model that you want to protect, such as the following User model:\n```\nconst User = mongoose.model('User', new mongoose.Schema({\n name: String,\n password: String,\n}));\n```\n\nYou would normally do something such as:\n```\nrestify.serve(router, User, {\n private: ['password'], // Set the password part of User as private, so outside people can't read it\n})\n```\n\nThis would hide the password field from people that send your application a `GET /User` and `GET /User/some-user-id` request. \n\nA malicious user can go to your application and send a request for `GET /User?distinct=password` and get all the passwords for all the users in the database, despite the field being set to private. This could be used for other private data, if the malicious user knew what was set as private for specific routes.\n\n\n## Recommendation\n\nVersion 2.x: Update to version 2.5.0 or later.\nVersion 3.x: Update to version 3.1.0 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/02/GHSA-6354-6mhv-mvv5/GHSA-6354-6mhv-mvv5.json b/advisories/github-reviewed/2019/02/GHSA-6354-6mhv-mvv5/GHSA-6354-6mhv-mvv5.json index 34ee6ae76d2..3601c7fd6ba 100644 --- a/advisories/github-reviewed/2019/02/GHSA-6354-6mhv-mvv5/GHSA-6354-6mhv-mvv5.json +++ b/advisories/github-reviewed/2019/02/GHSA-6354-6mhv-mvv5/GHSA-6354-6mhv-mvv5.json @@ -8,9 +8,7 @@ ], "summary": "Regular Expression Denial of Service in jadedown", "details": "The `jadedown` package is affected by a regular expression denial of service vulnerability when certain types of user input are passed in.\n\n\n### Proof of concept\n```js\nvar jadedown = require('jadedown');\n\nvar genstr = function (len, chr) {\n var result = \"\";\n for (i=0; i<=len; i++) {\n result = result + chr;\n }\n\n return result;\n}\n\n\nfor (i=1;i<=10000000;i=i+1) {\n console.log(\"COUNT: \" + i);\n var str = genstr(i, 'f') + genstr(i, '#') + '{';\n console.log(\"LENGTH: \" + str.length);\n var start = process.hrtime();\n jadedown(str)\n\n var end = process.hrtime(start);\n console.log(end);\n}\n\n```\n\nResults demonstrating blocking for 5 seconds using only 48 characters.\n\n```\n$ node jadedown.js\nCOUNT: 1\nLENGTH: 6\n[ 0, 4014065 ]\nCOUNT: 4\nLENGTH: 12\n[ 0, 503507 ]\nCOUNT: 7\nLENGTH: 18\n[ 0, 325225 ]\nCOUNT: 10\nLENGTH: 24\n[ 0, 1632684 ]\nCOUNT: 13\nLENGTH: 30\n[ 0, 7541230 ]\nCOUNT: 16\nLENGTH: 36\n[ 0, 80889495 ]\nCOUNT: 19\nLENGTH: 42\n[ 0, 636009936 ]\nCOUNT: 22\nLENGTH: 48\n[ 5, 820586760 ]\n```\n\n# Timeline\n- October 24, 2015 - Vulnerability Identified\n- October 24, 2015 - Maintainers Notified\n- October 25, 2015 - Response from Maintainers with intent to fix\n- January 5, 2016 - Advisory Published\n- January 11, 2016 - CVE Requested\n\n\n## Recommendation\n\nThis package is not actively maintained, and has not seen an update since 2011. \n\nThe package also provides unique functionality in the form of a templating language that is not available elsewhere. If this package is used to process user input, the best available mitigation is to refactor the dependent application to not make use of this module.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/01/GHSA-2gxj-qrp2-53jv/GHSA-2gxj-qrp2-53jv.json b/advisories/github-reviewed/2022/01/GHSA-2gxj-qrp2-53jv/GHSA-2gxj-qrp2-53jv.json index 81bea817a5c..514749e2d7b 100644 --- a/advisories/github-reviewed/2022/01/GHSA-2gxj-qrp2-53jv/GHSA-2gxj-qrp2-53jv.json +++ b/advisories/github-reviewed/2022/01/GHSA-2gxj-qrp2-53jv/GHSA-2gxj-qrp2-53jv.json @@ -58,9 +58,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-01-06T14:22:40Z", diff --git a/advisories/github-reviewed/2022/01/GHSA-6p3c-v8vc-c244/GHSA-6p3c-v8vc-c244.json b/advisories/github-reviewed/2022/01/GHSA-6p3c-v8vc-c244/GHSA-6p3c-v8vc-c244.json index b123b56e541..ea9eb04624e 100644 --- a/advisories/github-reviewed/2022/01/GHSA-6p3c-v8vc-c244/GHSA-6p3c-v8vc-c244.json +++ b/advisories/github-reviewed/2022/01/GHSA-6p3c-v8vc-c244/GHSA-6p3c-v8vc-c244.json @@ -62,9 +62,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-01-06T14:29:54Z", diff --git a/advisories/github-reviewed/2022/01/GHSA-r57r-j98g-587f/GHSA-r57r-j98g-587f.json b/advisories/github-reviewed/2022/01/GHSA-r57r-j98g-587f/GHSA-r57r-j98g-587f.json index 0f2ea991b33..b8722c26fab 100644 --- a/advisories/github-reviewed/2022/01/GHSA-r57r-j98g-587f/GHSA-r57r-j98g-587f.json +++ b/advisories/github-reviewed/2022/01/GHSA-r57r-j98g-587f/GHSA-r57r-j98g-587f.json @@ -63,9 +63,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-01-05T23:20:00Z", diff --git a/advisories/github-reviewed/2022/01/GHSA-xvcg-2q82-r87j/GHSA-xvcg-2q82-r87j.json b/advisories/github-reviewed/2022/01/GHSA-xvcg-2q82-r87j/GHSA-xvcg-2q82-r87j.json index 6c19c60932e..ba6269e744e 100644 --- a/advisories/github-reviewed/2022/01/GHSA-xvcg-2q82-r87j/GHSA-xvcg-2q82-r87j.json +++ b/advisories/github-reviewed/2022/01/GHSA-xvcg-2q82-r87j/GHSA-xvcg-2q82-r87j.json @@ -58,9 +58,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-01-06T18:18:40Z", diff --git a/advisories/github-reviewed/2023/04/GHSA-wjfc-pgfp-pv9c/GHSA-wjfc-pgfp-pv9c.json b/advisories/github-reviewed/2023/04/GHSA-wjfc-pgfp-pv9c/GHSA-wjfc-pgfp-pv9c.json index 655669780fc..146b8216e2e 100644 --- a/advisories/github-reviewed/2023/04/GHSA-wjfc-pgfp-pv9c/GHSA-wjfc-pgfp-pv9c.json +++ b/advisories/github-reviewed/2023/04/GHSA-wjfc-pgfp-pv9c/GHSA-wjfc-pgfp-pv9c.json @@ -3,9 +3,7 @@ "id": "GHSA-wjfc-pgfp-pv9c", "modified": "2023-04-21T20:27:30Z", "published": "2023-04-21T20:27:30Z", - "aliases": [ - - ], + "aliases": [], "summary": "Improper Input Validation in nyholm/psr7", "details": "### Impact\n\nImproper header parsing. An attacker could sneak in a newline (`\\n`) into both the header names and values. While the specification states that `\\r\\n\\r\\n` is used to terminate the header list, many servers in the wild will also accept `\\n\\n`.\n\n### Patches\n\nThe issue is patched in 1.6.1.\n\n### Workarounds\n\nThere are no known workarounds.\n\n### References\n\n* https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4", "severity": [ diff --git a/advisories/github-reviewed/2023/05/GHSA-6gp6-xj27-g89q/GHSA-6gp6-xj27-g89q.json b/advisories/github-reviewed/2023/05/GHSA-6gp6-xj27-g89q/GHSA-6gp6-xj27-g89q.json index ec51dd4d574..7f53aa55d09 100644 --- a/advisories/github-reviewed/2023/05/GHSA-6gp6-xj27-g89q/GHSA-6gp6-xj27-g89q.json +++ b/advisories/github-reviewed/2023/05/GHSA-6gp6-xj27-g89q/GHSA-6gp6-xj27-g89q.json @@ -4,9 +4,7 @@ "modified": "2023-05-10T21:18:54Z", "published": "2023-05-10T06:30:29Z", "withdrawn": "2023-05-10T21:18:54Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: Cross-site Scripting (XSS) in name field of Custom Reports", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-m6m9-gr85-79vm. This link is maintained to preserve external references.\n\n## Original Description\nCross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.", "severity": [ diff --git a/advisories/github-reviewed/2023/05/GHSA-g947-422m-hr7p/GHSA-g947-422m-hr7p.json b/advisories/github-reviewed/2023/05/GHSA-g947-422m-hr7p/GHSA-g947-422m-hr7p.json index 04cf0ec95c5..62605859e45 100644 --- a/advisories/github-reviewed/2023/05/GHSA-g947-422m-hr7p/GHSA-g947-422m-hr7p.json +++ b/advisories/github-reviewed/2023/05/GHSA-g947-422m-hr7p/GHSA-g947-422m-hr7p.json @@ -4,9 +4,7 @@ "modified": "2023-05-10T21:18:29Z", "published": "2023-05-10T06:30:27Z", "withdrawn": "2023-05-10T21:18:29Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: Pimcore Cross-site Scripting (XSS) in Static Routes name field", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-mhpj-7m7h-8p6x. This link is maintained to preserve external references.\n\n## Original Description\nCross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.", "severity": [ diff --git a/advisories/github-reviewed/2023/05/GHSA-j93v-cx26-2xc4/GHSA-j93v-cx26-2xc4.json b/advisories/github-reviewed/2023/05/GHSA-j93v-cx26-2xc4/GHSA-j93v-cx26-2xc4.json index 3f9de09968c..edc346e8ad6 100644 --- a/advisories/github-reviewed/2023/05/GHSA-j93v-cx26-2xc4/GHSA-j93v-cx26-2xc4.json +++ b/advisories/github-reviewed/2023/05/GHSA-j93v-cx26-2xc4/GHSA-j93v-cx26-2xc4.json @@ -4,9 +4,7 @@ "modified": "2023-05-10T21:19:09Z", "published": "2023-05-10T06:30:29Z", "withdrawn": "2023-05-10T21:19:09Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: Cross-site Scripting (XSS) in Predefined Properties delete", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-q7cc-m6jw-m262. This link is maintained to preserve external references.\n\n## Original DescriptionCross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.", "severity": [ diff --git a/advisories/unreviewed/2021/11/GHSA-jpw2-cwxg-4qv8/GHSA-jpw2-cwxg-4qv8.json b/advisories/unreviewed/2021/11/GHSA-jpw2-cwxg-4qv8/GHSA-jpw2-cwxg-4qv8.json index 7cced1f0c26..3e06ae9bb5c 100644 --- a/advisories/unreviewed/2021/11/GHSA-jpw2-cwxg-4qv8/GHSA-jpw2-cwxg-4qv8.json +++ b/advisories/unreviewed/2021/11/GHSA-jpw2-cwxg-4qv8/GHSA-jpw2-cwxg-4qv8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-3cgr-wxhv-h7xw/GHSA-3cgr-wxhv-h7xw.json b/advisories/unreviewed/2022/02/GHSA-3cgr-wxhv-h7xw/GHSA-3cgr-wxhv-h7xw.json index fd9a0974e91..8fcc39e464d 100644 --- a/advisories/unreviewed/2022/02/GHSA-3cgr-wxhv-h7xw/GHSA-3cgr-wxhv-h7xw.json +++ b/advisories/unreviewed/2022/02/GHSA-3cgr-wxhv-h7xw/GHSA-3cgr-wxhv-h7xw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-c547-2659-q37g/GHSA-c547-2659-q37g.json b/advisories/unreviewed/2022/02/GHSA-c547-2659-q37g/GHSA-c547-2659-q37g.json index db105dab217..06ef59ccd79 100644 --- a/advisories/unreviewed/2022/02/GHSA-c547-2659-q37g/GHSA-c547-2659-q37g.json +++ b/advisories/unreviewed/2022/02/GHSA-c547-2659-q37g/GHSA-c547-2659-q37g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-p58g-823f-vq5p/GHSA-p58g-823f-vq5p.json b/advisories/unreviewed/2022/02/GHSA-p58g-823f-vq5p/GHSA-p58g-823f-vq5p.json index 734228dd859..37795ed7d22 100644 --- a/advisories/unreviewed/2022/02/GHSA-p58g-823f-vq5p/GHSA-p58g-823f-vq5p.json +++ b/advisories/unreviewed/2022/02/GHSA-p58g-823f-vq5p/GHSA-p58g-823f-vq5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-25cc-wj23-95cr/GHSA-25cc-wj23-95cr.json b/advisories/unreviewed/2022/04/GHSA-25cc-wj23-95cr/GHSA-25cc-wj23-95cr.json index 4bf7f06faf3..997924b4168 100644 --- a/advisories/unreviewed/2022/04/GHSA-25cc-wj23-95cr/GHSA-25cc-wj23-95cr.json +++ b/advisories/unreviewed/2022/04/GHSA-25cc-wj23-95cr/GHSA-25cc-wj23-95cr.json @@ -7,12 +7,8 @@ "CVE-2001-1448" ], "details": "Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-265j-p2gg-g729/GHSA-265j-p2gg-g729.json b/advisories/unreviewed/2022/04/GHSA-265j-p2gg-g729/GHSA-265j-p2gg-g729.json index 896d8f0c841..be6db6e959f 100644 --- a/advisories/unreviewed/2022/04/GHSA-265j-p2gg-g729/GHSA-265j-p2gg-g729.json +++ b/advisories/unreviewed/2022/04/GHSA-265j-p2gg-g729/GHSA-265j-p2gg-g729.json @@ -7,12 +7,8 @@ "CVE-2001-1299" ], "details": "Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-27wq-44rw-m6wh/GHSA-27wq-44rw-m6wh.json b/advisories/unreviewed/2022/04/GHSA-27wq-44rw-m6wh/GHSA-27wq-44rw-m6wh.json index bf29a392bd2..6507c2a05ec 100644 --- a/advisories/unreviewed/2022/04/GHSA-27wq-44rw-m6wh/GHSA-27wq-44rw-m6wh.json +++ b/advisories/unreviewed/2022/04/GHSA-27wq-44rw-m6wh/GHSA-27wq-44rw-m6wh.json @@ -7,12 +7,8 @@ "CVE-2001-1292" ], "details": "Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-286j-4758-jr9w/GHSA-286j-4758-jr9w.json b/advisories/unreviewed/2022/04/GHSA-286j-4758-jr9w/GHSA-286j-4758-jr9w.json index 604378fe9f2..df2d7fcd01e 100644 --- a/advisories/unreviewed/2022/04/GHSA-286j-4758-jr9w/GHSA-286j-4758-jr9w.json +++ b/advisories/unreviewed/2022/04/GHSA-286j-4758-jr9w/GHSA-286j-4758-jr9w.json @@ -7,12 +7,8 @@ "CVE-2001-1463" ], "details": "The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password (OTP) authentication is enabled, which allows remote attackers to sniff passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2cr5-wgqf-c2ww/GHSA-2cr5-wgqf-c2ww.json b/advisories/unreviewed/2022/04/GHSA-2cr5-wgqf-c2ww/GHSA-2cr5-wgqf-c2ww.json index bbb56145a80..0f74e95622f 100644 --- a/advisories/unreviewed/2022/04/GHSA-2cr5-wgqf-c2ww/GHSA-2cr5-wgqf-c2ww.json +++ b/advisories/unreviewed/2022/04/GHSA-2cr5-wgqf-c2ww/GHSA-2cr5-wgqf-c2ww.json @@ -7,12 +7,8 @@ "CVE-2001-1504" ], "details": "Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2jvh-95r9-r8rh/GHSA-2jvh-95r9-r8rh.json b/advisories/unreviewed/2022/04/GHSA-2jvh-95r9-r8rh/GHSA-2jvh-95r9-r8rh.json index 1bc9c9fe665..203523eeaad 100644 --- a/advisories/unreviewed/2022/04/GHSA-2jvh-95r9-r8rh/GHSA-2jvh-95r9-r8rh.json +++ b/advisories/unreviewed/2022/04/GHSA-2jvh-95r9-r8rh/GHSA-2jvh-95r9-r8rh.json @@ -7,12 +7,8 @@ "CVE-2001-1505" ], "details": "tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2wcp-prmg-9pr7/GHSA-2wcp-prmg-9pr7.json b/advisories/unreviewed/2022/04/GHSA-2wcp-prmg-9pr7/GHSA-2wcp-prmg-9pr7.json index 3f77b2f1e38..45724f7a529 100644 --- a/advisories/unreviewed/2022/04/GHSA-2wcp-prmg-9pr7/GHSA-2wcp-prmg-9pr7.json +++ b/advisories/unreviewed/2022/04/GHSA-2wcp-prmg-9pr7/GHSA-2wcp-prmg-9pr7.json @@ -7,12 +7,8 @@ "CVE-2001-1387" ], "details": "iptables-save in iptables before 1.2.4 records the \"--reject-with icmp-host-prohibited\" rule as \"--reject-with tcp-reset,\" which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2wqm-g7m4-4gj8/GHSA-2wqm-g7m4-4gj8.json b/advisories/unreviewed/2022/04/GHSA-2wqm-g7m4-4gj8/GHSA-2wqm-g7m4-4gj8.json index c7e6261151f..090828bd12f 100644 --- a/advisories/unreviewed/2022/04/GHSA-2wqm-g7m4-4gj8/GHSA-2wqm-g7m4-4gj8.json +++ b/advisories/unreviewed/2022/04/GHSA-2wqm-g7m4-4gj8/GHSA-2wqm-g7m4-4gj8.json @@ -7,12 +7,8 @@ "CVE-2001-1388" ], "details": "iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-35mm-49c2-78fg/GHSA-35mm-49c2-78fg.json b/advisories/unreviewed/2022/04/GHSA-35mm-49c2-78fg/GHSA-35mm-49c2-78fg.json index 6ba08e49bdb..585ca3ccc12 100644 --- a/advisories/unreviewed/2022/04/GHSA-35mm-49c2-78fg/GHSA-35mm-49c2-78fg.json +++ b/advisories/unreviewed/2022/04/GHSA-35mm-49c2-78fg/GHSA-35mm-49c2-78fg.json @@ -7,12 +7,8 @@ "CVE-2001-1273" ], "details": "The \"mxcsr P4\" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-35mq-8mc3-vcm8/GHSA-35mq-8mc3-vcm8.json b/advisories/unreviewed/2022/04/GHSA-35mq-8mc3-vcm8/GHSA-35mq-8mc3-vcm8.json index 03f62ba570c..4991799cadb 100644 --- a/advisories/unreviewed/2022/04/GHSA-35mq-8mc3-vcm8/GHSA-35mq-8mc3-vcm8.json +++ b/advisories/unreviewed/2022/04/GHSA-35mq-8mc3-vcm8/GHSA-35mq-8mc3-vcm8.json @@ -7,12 +7,8 @@ "CVE-2001-1380" ], "details": "OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the \"from\" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-35xx-5qr2-qpwp/GHSA-35xx-5qr2-qpwp.json b/advisories/unreviewed/2022/04/GHSA-35xx-5qr2-qpwp/GHSA-35xx-5qr2-qpwp.json index 1f98bdd9cf0..91f9a994e79 100644 --- a/advisories/unreviewed/2022/04/GHSA-35xx-5qr2-qpwp/GHSA-35xx-5qr2-qpwp.json +++ b/advisories/unreviewed/2022/04/GHSA-35xx-5qr2-qpwp/GHSA-35xx-5qr2-qpwp.json @@ -7,12 +7,8 @@ "CVE-2001-1346" ], "details": "Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-36pw-mfj6-c8q4/GHSA-36pw-mfj6-c8q4.json b/advisories/unreviewed/2022/04/GHSA-36pw-mfj6-c8q4/GHSA-36pw-mfj6-c8q4.json index f5f15fb02c4..9410a104090 100644 --- a/advisories/unreviewed/2022/04/GHSA-36pw-mfj6-c8q4/GHSA-36pw-mfj6-c8q4.json +++ b/advisories/unreviewed/2022/04/GHSA-36pw-mfj6-c8q4/GHSA-36pw-mfj6-c8q4.json @@ -7,12 +7,8 @@ "CVE-2001-1395" ], "details": "Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to \"boundary cases,\" with unknown impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-373j-h87p-5m67/GHSA-373j-h87p-5m67.json b/advisories/unreviewed/2022/04/GHSA-373j-h87p-5m67/GHSA-373j-h87p-5m67.json index 30b1ced8396..48cb64b112f 100644 --- a/advisories/unreviewed/2022/04/GHSA-373j-h87p-5m67/GHSA-373j-h87p-5m67.json +++ b/advisories/unreviewed/2022/04/GHSA-373j-h87p-5m67/GHSA-373j-h87p-5m67.json @@ -7,12 +7,8 @@ "CVE-2001-1272" ], "details": "wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3974-gm3f-4hv8/GHSA-3974-gm3f-4hv8.json b/advisories/unreviewed/2022/04/GHSA-3974-gm3f-4hv8/GHSA-3974-gm3f-4hv8.json index d2b1e8b45a0..ea1b121d536 100644 --- a/advisories/unreviewed/2022/04/GHSA-3974-gm3f-4hv8/GHSA-3974-gm3f-4hv8.json +++ b/advisories/unreviewed/2022/04/GHSA-3974-gm3f-4hv8/GHSA-3974-gm3f-4hv8.json @@ -7,12 +7,8 @@ "CVE-2001-1304" ], "details": "Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-39ph-g4x9-c3wj/GHSA-39ph-g4x9-c3wj.json b/advisories/unreviewed/2022/04/GHSA-39ph-g4x9-c3wj/GHSA-39ph-g4x9-c3wj.json index 6f00f8992d2..7744c405bc6 100644 --- a/advisories/unreviewed/2022/04/GHSA-39ph-g4x9-c3wj/GHSA-39ph-g4x9-c3wj.json +++ b/advisories/unreviewed/2022/04/GHSA-39ph-g4x9-c3wj/GHSA-39ph-g4x9-c3wj.json @@ -7,12 +7,8 @@ "CVE-2001-1338" ], "details": "Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3c98-cg94-53j7/GHSA-3c98-cg94-53j7.json b/advisories/unreviewed/2022/04/GHSA-3c98-cg94-53j7/GHSA-3c98-cg94-53j7.json index 063888528e7..a07dcf8d29c 100644 --- a/advisories/unreviewed/2022/04/GHSA-3c98-cg94-53j7/GHSA-3c98-cg94-53j7.json +++ b/advisories/unreviewed/2022/04/GHSA-3c98-cg94-53j7/GHSA-3c98-cg94-53j7.json @@ -7,12 +7,8 @@ "CVE-2001-1400" ], "details": "Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3g85-rc94-jg7f/GHSA-3g85-rc94-jg7f.json b/advisories/unreviewed/2022/04/GHSA-3g85-rc94-jg7f/GHSA-3g85-rc94-jg7f.json index 93324e4e3ca..bb289f581f4 100644 --- a/advisories/unreviewed/2022/04/GHSA-3g85-rc94-jg7f/GHSA-3g85-rc94-jg7f.json +++ b/advisories/unreviewed/2022/04/GHSA-3g85-rc94-jg7f/GHSA-3g85-rc94-jg7f.json @@ -7,12 +7,8 @@ "CVE-2001-1257" ], "details": "Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3grm-5x3c-hp2m/GHSA-3grm-5x3c-hp2m.json b/advisories/unreviewed/2022/04/GHSA-3grm-5x3c-hp2m/GHSA-3grm-5x3c-hp2m.json index 37e8823c66f..c4b3d1087c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-3grm-5x3c-hp2m/GHSA-3grm-5x3c-hp2m.json +++ b/advisories/unreviewed/2022/04/GHSA-3grm-5x3c-hp2m/GHSA-3grm-5x3c-hp2m.json @@ -7,12 +7,8 @@ "CVE-2001-1271" ], "details": "Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3hw3-cr75-52m9/GHSA-3hw3-cr75-52m9.json b/advisories/unreviewed/2022/04/GHSA-3hw3-cr75-52m9/GHSA-3hw3-cr75-52m9.json index 587f1ac51fd..a5de32fac6e 100644 --- a/advisories/unreviewed/2022/04/GHSA-3hw3-cr75-52m9/GHSA-3hw3-cr75-52m9.json +++ b/advisories/unreviewed/2022/04/GHSA-3hw3-cr75-52m9/GHSA-3hw3-cr75-52m9.json @@ -7,12 +7,8 @@ "CVE-2001-1490" ], "details": "Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3jqj-38m2-pxp7/GHSA-3jqj-38m2-pxp7.json b/advisories/unreviewed/2022/04/GHSA-3jqj-38m2-pxp7/GHSA-3jqj-38m2-pxp7.json index 61e07ca1b3a..6a049da3125 100644 --- a/advisories/unreviewed/2022/04/GHSA-3jqj-38m2-pxp7/GHSA-3jqj-38m2-pxp7.json +++ b/advisories/unreviewed/2022/04/GHSA-3jqj-38m2-pxp7/GHSA-3jqj-38m2-pxp7.json @@ -7,12 +7,8 @@ "CVE-2001-1330" ], "details": "Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3jqm-4487-ppp7/GHSA-3jqm-4487-ppp7.json b/advisories/unreviewed/2022/04/GHSA-3jqm-4487-ppp7/GHSA-3jqm-4487-ppp7.json index cb4e3b22632..e290f55d08d 100644 --- a/advisories/unreviewed/2022/04/GHSA-3jqm-4487-ppp7/GHSA-3jqm-4487-ppp7.json +++ b/advisories/unreviewed/2022/04/GHSA-3jqm-4487-ppp7/GHSA-3jqm-4487-ppp7.json @@ -7,12 +7,8 @@ "CVE-2001-1472" ], "details": "SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3jxh-7h2g-h6mg/GHSA-3jxh-7h2g-h6mg.json b/advisories/unreviewed/2022/04/GHSA-3jxh-7h2g-h6mg/GHSA-3jxh-7h2g-h6mg.json index 83e952a0424..32b63126b8e 100644 --- a/advisories/unreviewed/2022/04/GHSA-3jxh-7h2g-h6mg/GHSA-3jxh-7h2g-h6mg.json +++ b/advisories/unreviewed/2022/04/GHSA-3jxh-7h2g-h6mg/GHSA-3jxh-7h2g-h6mg.json @@ -7,12 +7,8 @@ "CVE-2001-1419" ], "details": "AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of \" map[4294967295]\n\nThe maximum length of a filename is 255 and the minimum block size is 1024,\nso it is always guaranteed that the number of entries is greater than or\nequal to 2 when do_split() is called.\n\nBut syzbot's crafted image has no dot and dotdot in dir, and the dentry\ndistribution in dirblock is as follows:\n\n bus dentry1 hole dentry2 free\n|xx--|xx-------------|...............|xx-------------|...............|\n0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024\n\nSo when renaming dentry1 increases its name_len length by 1, neither hole\nnor free is sufficient to hold the new dentry, and make_indexed_dir() is\ncalled.\n\nIn make_indexed_dir() it is assumed that the first two entries of the\ndirblock must be dot and dotdot, so bus and dentry1 are left in dx_root\nbecause they are treated as dot and dotdot, and only dentry2 is moved\nto the new leaf block. That's why count is equal to 1.\n\nTherefore add the ext4_check_dx_root() helper function to add more sanity\nchecks to dot and dotdot before starting the conversion to avoid the above\nissue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-4w6w-2c5p-xchq/GHSA-4w6w-2c5p-xchq.json b/advisories/unreviewed/2024/08/GHSA-4w6w-2c5p-xchq/GHSA-4w6w-2c5p-xchq.json index 16f0f840063..e69ca43e423 100644 --- a/advisories/unreviewed/2024/08/GHSA-4w6w-2c5p-xchq/GHSA-4w6w-2c5p-xchq.json +++ b/advisories/unreviewed/2024/08/GHSA-4w6w-2c5p-xchq/GHSA-4w6w-2c5p-xchq.json @@ -7,12 +7,8 @@ "CVE-2024-42281" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix a segment issue when downgrading gso_size\n\nLinearize the skb when downgrading gso_size because it may trigger a\nBUG_ON() later when the skb is segmented as described in [1,2].", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json b/advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json index 6e2c79a61ba..03bdbb4a812 100644 --- a/advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json +++ b/advisories/unreviewed/2024/08/GHSA-59hv-jp72-r98g/GHSA-59hv-jp72-r98g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5f8c-3p29-x98q/GHSA-5f8c-3p29-x98q.json b/advisories/unreviewed/2024/08/GHSA-5f8c-3p29-x98q/GHSA-5f8c-3p29-x98q.json index 5de1fa19cb2..8441cf3550c 100644 --- a/advisories/unreviewed/2024/08/GHSA-5f8c-3p29-x98q/GHSA-5f8c-3p29-x98q.json +++ b/advisories/unreviewed/2024/08/GHSA-5f8c-3p29-x98q/GHSA-5f8c-3p29-x98q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5mg4-xpj4-crpr/GHSA-5mg4-xpj4-crpr.json b/advisories/unreviewed/2024/08/GHSA-5mg4-xpj4-crpr/GHSA-5mg4-xpj4-crpr.json index bf854e2dad1..e2e04dd11b6 100644 --- a/advisories/unreviewed/2024/08/GHSA-5mg4-xpj4-crpr/GHSA-5mg4-xpj4-crpr.json +++ b/advisories/unreviewed/2024/08/GHSA-5mg4-xpj4-crpr/GHSA-5mg4-xpj4-crpr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5q8g-5hhx-x3c8/GHSA-5q8g-5hhx-x3c8.json b/advisories/unreviewed/2024/08/GHSA-5q8g-5hhx-x3c8/GHSA-5q8g-5hhx-x3c8.json index 2e0051d8ff7..401f1a77ae7 100644 --- a/advisories/unreviewed/2024/08/GHSA-5q8g-5hhx-x3c8/GHSA-5q8g-5hhx-x3c8.json +++ b/advisories/unreviewed/2024/08/GHSA-5q8g-5hhx-x3c8/GHSA-5q8g-5hhx-x3c8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5q9m-f3cj-62wm/GHSA-5q9m-f3cj-62wm.json b/advisories/unreviewed/2024/08/GHSA-5q9m-f3cj-62wm/GHSA-5q9m-f3cj-62wm.json index 5cc9dcb4c1c..b4860de66b5 100644 --- a/advisories/unreviewed/2024/08/GHSA-5q9m-f3cj-62wm/GHSA-5q9m-f3cj-62wm.json +++ b/advisories/unreviewed/2024/08/GHSA-5q9m-f3cj-62wm/GHSA-5q9m-f3cj-62wm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-65q8-wrmh-rrcm/GHSA-65q8-wrmh-rrcm.json b/advisories/unreviewed/2024/08/GHSA-65q8-wrmh-rrcm/GHSA-65q8-wrmh-rrcm.json index 09d562cf26f..be372166583 100644 --- a/advisories/unreviewed/2024/08/GHSA-65q8-wrmh-rrcm/GHSA-65q8-wrmh-rrcm.json +++ b/advisories/unreviewed/2024/08/GHSA-65q8-wrmh-rrcm/GHSA-65q8-wrmh-rrcm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-6c55-p332-pqhh/GHSA-6c55-p332-pqhh.json b/advisories/unreviewed/2024/08/GHSA-6c55-p332-pqhh/GHSA-6c55-p332-pqhh.json index 7b8b2d0dd37..08be428c16e 100644 --- a/advisories/unreviewed/2024/08/GHSA-6c55-p332-pqhh/GHSA-6c55-p332-pqhh.json +++ b/advisories/unreviewed/2024/08/GHSA-6c55-p332-pqhh/GHSA-6c55-p332-pqhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-6j4x-5vg8-wc8v/GHSA-6j4x-5vg8-wc8v.json b/advisories/unreviewed/2024/08/GHSA-6j4x-5vg8-wc8v/GHSA-6j4x-5vg8-wc8v.json index f2dcfc47d39..2b08dbe1548 100644 --- a/advisories/unreviewed/2024/08/GHSA-6j4x-5vg8-wc8v/GHSA-6j4x-5vg8-wc8v.json +++ b/advisories/unreviewed/2024/08/GHSA-6j4x-5vg8-wc8v/GHSA-6j4x-5vg8-wc8v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-757v-57mw-8gq9/GHSA-757v-57mw-8gq9.json b/advisories/unreviewed/2024/08/GHSA-757v-57mw-8gq9/GHSA-757v-57mw-8gq9.json index b167023cfb3..f6d4a04555b 100644 --- a/advisories/unreviewed/2024/08/GHSA-757v-57mw-8gq9/GHSA-757v-57mw-8gq9.json +++ b/advisories/unreviewed/2024/08/GHSA-757v-57mw-8gq9/GHSA-757v-57mw-8gq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-782r-hcgf-6crv/GHSA-782r-hcgf-6crv.json b/advisories/unreviewed/2024/08/GHSA-782r-hcgf-6crv/GHSA-782r-hcgf-6crv.json index 4c85b23f206..bac444f93d7 100644 --- a/advisories/unreviewed/2024/08/GHSA-782r-hcgf-6crv/GHSA-782r-hcgf-6crv.json +++ b/advisories/unreviewed/2024/08/GHSA-782r-hcgf-6crv/GHSA-782r-hcgf-6crv.json @@ -7,12 +7,8 @@ "CVE-2024-42306" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Avoid using corrupted block bitmap buffer\n\nWhen the filesystem block bitmap is corrupted, we detect the corruption\nwhile loading the bitmap and fail the allocation with error. However the\nnext allocation from the same bitmap will notice the bitmap buffer is\nalready loaded and tries to allocate from the bitmap with mixed results\n(depending on the exact nature of the bitmap corruption). Fix the\nproblem by using BH_verified bit to indicate whether the bitmap is valid\nor not.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-7fjm-wq66-2552/GHSA-7fjm-wq66-2552.json b/advisories/unreviewed/2024/08/GHSA-7fjm-wq66-2552/GHSA-7fjm-wq66-2552.json index 3d5db913507..4c2d304e8bd 100644 --- a/advisories/unreviewed/2024/08/GHSA-7fjm-wq66-2552/GHSA-7fjm-wq66-2552.json +++ b/advisories/unreviewed/2024/08/GHSA-7fjm-wq66-2552/GHSA-7fjm-wq66-2552.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7pwv-q23j-cjjf/GHSA-7pwv-q23j-cjjf.json b/advisories/unreviewed/2024/08/GHSA-7pwv-q23j-cjjf/GHSA-7pwv-q23j-cjjf.json index c43a2dd97dc..aaa92eb891d 100644 --- a/advisories/unreviewed/2024/08/GHSA-7pwv-q23j-cjjf/GHSA-7pwv-q23j-cjjf.json +++ b/advisories/unreviewed/2024/08/GHSA-7pwv-q23j-cjjf/GHSA-7pwv-q23j-cjjf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7r46-fpc4-h7v3/GHSA-7r46-fpc4-h7v3.json b/advisories/unreviewed/2024/08/GHSA-7r46-fpc4-h7v3/GHSA-7r46-fpc4-h7v3.json index 125016753fe..4bcf83b413f 100644 --- a/advisories/unreviewed/2024/08/GHSA-7r46-fpc4-h7v3/GHSA-7r46-fpc4-h7v3.json +++ b/advisories/unreviewed/2024/08/GHSA-7r46-fpc4-h7v3/GHSA-7r46-fpc4-h7v3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-847c-wppm-4c32/GHSA-847c-wppm-4c32.json b/advisories/unreviewed/2024/08/GHSA-847c-wppm-4c32/GHSA-847c-wppm-4c32.json index 1641ceefc52..a6f8414597e 100644 --- a/advisories/unreviewed/2024/08/GHSA-847c-wppm-4c32/GHSA-847c-wppm-4c32.json +++ b/advisories/unreviewed/2024/08/GHSA-847c-wppm-4c32/GHSA-847c-wppm-4c32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8hjv-w23c-j35h/GHSA-8hjv-w23c-j35h.json b/advisories/unreviewed/2024/08/GHSA-8hjv-w23c-j35h/GHSA-8hjv-w23c-j35h.json index 60c0acd7596..963562e6535 100644 --- a/advisories/unreviewed/2024/08/GHSA-8hjv-w23c-j35h/GHSA-8hjv-w23c-j35h.json +++ b/advisories/unreviewed/2024/08/GHSA-8hjv-w23c-j35h/GHSA-8hjv-w23c-j35h.json @@ -7,12 +7,8 @@ "CVE-2024-42292" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nkobject_uevent: Fix OOB access within zap_modalias_env()\n\nzap_modalias_env() wrongly calculates size of memory block to move, so\nwill cause OOB memory access issue if variable MODALIAS is not the last\none within its @env parameter, fixed by correcting size to memmove.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-8rm8-w795-ff7r/GHSA-8rm8-w795-ff7r.json b/advisories/unreviewed/2024/08/GHSA-8rm8-w795-ff7r/GHSA-8rm8-w795-ff7r.json index bfb874a0b2a..de69fbe66a8 100644 --- a/advisories/unreviewed/2024/08/GHSA-8rm8-w795-ff7r/GHSA-8rm8-w795-ff7r.json +++ b/advisories/unreviewed/2024/08/GHSA-8rm8-w795-ff7r/GHSA-8rm8-w795-ff7r.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8xf4-8j68-7v4x/GHSA-8xf4-8j68-7v4x.json b/advisories/unreviewed/2024/08/GHSA-8xf4-8j68-7v4x/GHSA-8xf4-8j68-7v4x.json index 53ef08de52b..efa495293e4 100644 --- a/advisories/unreviewed/2024/08/GHSA-8xf4-8j68-7v4x/GHSA-8xf4-8j68-7v4x.json +++ b/advisories/unreviewed/2024/08/GHSA-8xf4-8j68-7v4x/GHSA-8xf4-8j68-7v4x.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-952c-48vm-qj8v/GHSA-952c-48vm-qj8v.json b/advisories/unreviewed/2024/08/GHSA-952c-48vm-qj8v/GHSA-952c-48vm-qj8v.json index ecaf39c61e8..391abed9b24 100644 --- a/advisories/unreviewed/2024/08/GHSA-952c-48vm-qj8v/GHSA-952c-48vm-qj8v.json +++ b/advisories/unreviewed/2024/08/GHSA-952c-48vm-qj8v/GHSA-952c-48vm-qj8v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9v94-8833-hv33/GHSA-9v94-8833-hv33.json b/advisories/unreviewed/2024/08/GHSA-9v94-8833-hv33/GHSA-9v94-8833-hv33.json index 22d17119349..7d9408c1785 100644 --- a/advisories/unreviewed/2024/08/GHSA-9v94-8833-hv33/GHSA-9v94-8833-hv33.json +++ b/advisories/unreviewed/2024/08/GHSA-9v94-8833-hv33/GHSA-9v94-8833-hv33.json @@ -7,12 +7,8 @@ "CVE-2024-42265" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nprotect the fetch of ->fd[fd] in do_dup2() from mispredictions\n\nboth callers have verified that fd is not greater than ->max_fds;\nhowever, misprediction might end up with\n tofree = fdt->fd[fd];\nbeing speculatively executed. That's wrong for the same reasons\nwhy it's wrong in close_fd()/file_close_fd_locked(); the same\nsolution applies - array_index_nospec(fd, fdt->max_fds) could differ\nfrom fd only in case of speculative execution on mispredicted path.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-c2h9-43rg-vvgh/GHSA-c2h9-43rg-vvgh.json b/advisories/unreviewed/2024/08/GHSA-c2h9-43rg-vvgh/GHSA-c2h9-43rg-vvgh.json index 1237ff4a966..76d1044f88b 100644 --- a/advisories/unreviewed/2024/08/GHSA-c2h9-43rg-vvgh/GHSA-c2h9-43rg-vvgh.json +++ b/advisories/unreviewed/2024/08/GHSA-c2h9-43rg-vvgh/GHSA-c2h9-43rg-vvgh.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-c2p2-p654-9c4p/GHSA-c2p2-p654-9c4p.json b/advisories/unreviewed/2024/08/GHSA-c2p2-p654-9c4p/GHSA-c2p2-p654-9c4p.json index 62c786e4c60..e86bd289c9b 100644 --- a/advisories/unreviewed/2024/08/GHSA-c2p2-p654-9c4p/GHSA-c2p2-p654-9c4p.json +++ b/advisories/unreviewed/2024/08/GHSA-c2p2-p654-9c4p/GHSA-c2p2-p654-9c4p.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-c4j6-mvfp-j4wx/GHSA-c4j6-mvfp-j4wx.json b/advisories/unreviewed/2024/08/GHSA-c4j6-mvfp-j4wx/GHSA-c4j6-mvfp-j4wx.json index 066337211a4..9b7e9c4a2a8 100644 --- a/advisories/unreviewed/2024/08/GHSA-c4j6-mvfp-j4wx/GHSA-c4j6-mvfp-j4wx.json +++ b/advisories/unreviewed/2024/08/GHSA-c4j6-mvfp-j4wx/GHSA-c4j6-mvfp-j4wx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-c856-w373-jm6c/GHSA-c856-w373-jm6c.json b/advisories/unreviewed/2024/08/GHSA-c856-w373-jm6c/GHSA-c856-w373-jm6c.json index 4cce94279f0..286c3c846de 100644 --- a/advisories/unreviewed/2024/08/GHSA-c856-w373-jm6c/GHSA-c856-w373-jm6c.json +++ b/advisories/unreviewed/2024/08/GHSA-c856-w373-jm6c/GHSA-c856-w373-jm6c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-c9w5-xr92-cpm7/GHSA-c9w5-xr92-cpm7.json b/advisories/unreviewed/2024/08/GHSA-c9w5-xr92-cpm7/GHSA-c9w5-xr92-cpm7.json index 40d2d599e6a..58cdbd1ff2b 100644 --- a/advisories/unreviewed/2024/08/GHSA-c9w5-xr92-cpm7/GHSA-c9w5-xr92-cpm7.json +++ b/advisories/unreviewed/2024/08/GHSA-c9w5-xr92-cpm7/GHSA-c9w5-xr92-cpm7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-cgf8-p428-jrjq/GHSA-cgf8-p428-jrjq.json b/advisories/unreviewed/2024/08/GHSA-cgf8-p428-jrjq/GHSA-cgf8-p428-jrjq.json index f2f28d14df6..f8e5750e0c9 100644 --- a/advisories/unreviewed/2024/08/GHSA-cgf8-p428-jrjq/GHSA-cgf8-p428-jrjq.json +++ b/advisories/unreviewed/2024/08/GHSA-cgf8-p428-jrjq/GHSA-cgf8-p428-jrjq.json @@ -7,12 +7,8 @@ "CVE-2024-42296" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix return value of f2fs_convert_inline_inode()\n\nIf device is readonly, make f2fs_convert_inline_inode()\nreturn EROFS instead of zero, otherwise it may trigger\npanic during writeback of inline inode's dirty page as\nbelow:\n\n f2fs_write_single_data_page+0xbb6/0x1e90 fs/f2fs/data.c:2888\n f2fs_write_cache_pages fs/f2fs/data.c:3187 [inline]\n __f2fs_write_data_pages fs/f2fs/data.c:3342 [inline]\n f2fs_write_data_pages+0x1efe/0x3a90 fs/f2fs/data.c:3369\n do_writepages+0x359/0x870 mm/page-writeback.c:2634\n filemap_fdatawrite_wbc+0x125/0x180 mm/filemap.c:397\n __filemap_fdatawrite_range mm/filemap.c:430 [inline]\n file_write_and_wait_range+0x1aa/0x290 mm/filemap.c:788\n f2fs_do_sync_file+0x68a/0x1ae0 fs/f2fs/file.c:276\n generic_write_sync include/linux/fs.h:2806 [inline]\n f2fs_file_write_iter+0x7bd/0x24e0 fs/f2fs/file.c:4977\n call_write_iter include/linux/fs.h:2114 [inline]\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xa72/0xc90 fs/read_write.c:590\n ksys_write+0x1a0/0x2c0 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-cj67-x3pw-qjqp/GHSA-cj67-x3pw-qjqp.json b/advisories/unreviewed/2024/08/GHSA-cj67-x3pw-qjqp/GHSA-cj67-x3pw-qjqp.json index 7f02869f7f9..31287503998 100644 --- a/advisories/unreviewed/2024/08/GHSA-cj67-x3pw-qjqp/GHSA-cj67-x3pw-qjqp.json +++ b/advisories/unreviewed/2024/08/GHSA-cj67-x3pw-qjqp/GHSA-cj67-x3pw-qjqp.json @@ -7,12 +7,8 @@ "CVE-2024-42267" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()\n\nHandle VM_FAULT_SIGSEGV in the page fault path so that we correctly\nkill the process and we don't BUG() the kernel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json b/advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json index 7024fa50db7..38553b82c82 100644 --- a/advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json +++ b/advisories/unreviewed/2024/08/GHSA-cjw7-m3pc-wg7r/GHSA-cjw7-m3pc-wg7r.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-cmwh-2hhq-v8pr/GHSA-cmwh-2hhq-v8pr.json b/advisories/unreviewed/2024/08/GHSA-cmwh-2hhq-v8pr/GHSA-cmwh-2hhq-v8pr.json index 7eaf60c97b7..88842bcc79c 100644 --- a/advisories/unreviewed/2024/08/GHSA-cmwh-2hhq-v8pr/GHSA-cmwh-2hhq-v8pr.json +++ b/advisories/unreviewed/2024/08/GHSA-cmwh-2hhq-v8pr/GHSA-cmwh-2hhq-v8pr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-cqhv-gjjx-8p9m/GHSA-cqhv-gjjx-8p9m.json b/advisories/unreviewed/2024/08/GHSA-cqhv-gjjx-8p9m/GHSA-cqhv-gjjx-8p9m.json index f7ae642ea54..fcb76cf0d33 100644 --- a/advisories/unreviewed/2024/08/GHSA-cqhv-gjjx-8p9m/GHSA-cqhv-gjjx-8p9m.json +++ b/advisories/unreviewed/2024/08/GHSA-cqhv-gjjx-8p9m/GHSA-cqhv-gjjx-8p9m.json @@ -7,12 +7,8 @@ "CVE-2024-42276" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: add missing condition check for existence of mapped data\n\nnvme_map_data() is called when request has physical segments, hence\nthe nvme_unmap_data() should have same condition to avoid dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-cw27-48p6-664x/GHSA-cw27-48p6-664x.json b/advisories/unreviewed/2024/08/GHSA-cw27-48p6-664x/GHSA-cw27-48p6-664x.json index 75d588ea95d..01a9c69285d 100644 --- a/advisories/unreviewed/2024/08/GHSA-cw27-48p6-664x/GHSA-cw27-48p6-664x.json +++ b/advisories/unreviewed/2024/08/GHSA-cw27-48p6-664x/GHSA-cw27-48p6-664x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f64h-f2xm-35c7/GHSA-f64h-f2xm-35c7.json b/advisories/unreviewed/2024/08/GHSA-f64h-f2xm-35c7/GHSA-f64h-f2xm-35c7.json index d46289db72c..cfa3f19f853 100644 --- a/advisories/unreviewed/2024/08/GHSA-f64h-f2xm-35c7/GHSA-f64h-f2xm-35c7.json +++ b/advisories/unreviewed/2024/08/GHSA-f64h-f2xm-35c7/GHSA-f64h-f2xm-35c7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f6fr-v692-h863/GHSA-f6fr-v692-h863.json b/advisories/unreviewed/2024/08/GHSA-f6fr-v692-h863/GHSA-f6fr-v692-h863.json index fe2dfc28c28..b426a2b2303 100644 --- a/advisories/unreviewed/2024/08/GHSA-f6fr-v692-h863/GHSA-f6fr-v692-h863.json +++ b/advisories/unreviewed/2024/08/GHSA-f6fr-v692-h863/GHSA-f6fr-v692-h863.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f6p4-hhx3-24fg/GHSA-f6p4-hhx3-24fg.json b/advisories/unreviewed/2024/08/GHSA-f6p4-hhx3-24fg/GHSA-f6p4-hhx3-24fg.json index 8bae7ca53d4..0c53f927cd3 100644 --- a/advisories/unreviewed/2024/08/GHSA-f6p4-hhx3-24fg/GHSA-f6p4-hhx3-24fg.json +++ b/advisories/unreviewed/2024/08/GHSA-f6p4-hhx3-24fg/GHSA-f6p4-hhx3-24fg.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fcjf-98wx-3v8x/GHSA-fcjf-98wx-3v8x.json b/advisories/unreviewed/2024/08/GHSA-fcjf-98wx-3v8x/GHSA-fcjf-98wx-3v8x.json index 979ee6e4597..e39680f6619 100644 --- a/advisories/unreviewed/2024/08/GHSA-fcjf-98wx-3v8x/GHSA-fcjf-98wx-3v8x.json +++ b/advisories/unreviewed/2024/08/GHSA-fcjf-98wx-3v8x/GHSA-fcjf-98wx-3v8x.json @@ -7,12 +7,8 @@ "CVE-2024-42312" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: always initialize i_uid/i_gid\n\nAlways initialize i_uid/i_gid inside the sysfs core so set_ownership()\ncan safely skip setting them.\n\nCommit 5ec27ec735ba (\"fs/proc/proc_sysctl.c: fix the default values of\ni_uid/i_gid on /proc/sys inodes.\") added defaults for i_uid/i_gid when\nset_ownership() was not implemented. It also missed adjusting\nnet_ctl_set_ownership() to use the same default values in case the\ncomputation of a better value failed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-ff2j-rwgx-m3hr/GHSA-ff2j-rwgx-m3hr.json b/advisories/unreviewed/2024/08/GHSA-ff2j-rwgx-m3hr/GHSA-ff2j-rwgx-m3hr.json index 6d480eca641..aa340921615 100644 --- a/advisories/unreviewed/2024/08/GHSA-ff2j-rwgx-m3hr/GHSA-ff2j-rwgx-m3hr.json +++ b/advisories/unreviewed/2024/08/GHSA-ff2j-rwgx-m3hr/GHSA-ff2j-rwgx-m3hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-ffm7-5xwh-8f68/GHSA-ffm7-5xwh-8f68.json b/advisories/unreviewed/2024/08/GHSA-ffm7-5xwh-8f68/GHSA-ffm7-5xwh-8f68.json index 3f9a6b832ac..93172640001 100644 --- a/advisories/unreviewed/2024/08/GHSA-ffm7-5xwh-8f68/GHSA-ffm7-5xwh-8f68.json +++ b/advisories/unreviewed/2024/08/GHSA-ffm7-5xwh-8f68/GHSA-ffm7-5xwh-8f68.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fqr9-v44c-j829/GHSA-fqr9-v44c-j829.json b/advisories/unreviewed/2024/08/GHSA-fqr9-v44c-j829/GHSA-fqr9-v44c-j829.json index 4915dfc2b89..e063a61f70c 100644 --- a/advisories/unreviewed/2024/08/GHSA-fqr9-v44c-j829/GHSA-fqr9-v44c-j829.json +++ b/advisories/unreviewed/2024/08/GHSA-fqr9-v44c-j829/GHSA-fqr9-v44c-j829.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fwg4-px6f-6fj8/GHSA-fwg4-px6f-6fj8.json b/advisories/unreviewed/2024/08/GHSA-fwg4-px6f-6fj8/GHSA-fwg4-px6f-6fj8.json index eebdab40694..c620ec6e3a8 100644 --- a/advisories/unreviewed/2024/08/GHSA-fwg4-px6f-6fj8/GHSA-fwg4-px6f-6fj8.json +++ b/advisories/unreviewed/2024/08/GHSA-fwg4-px6f-6fj8/GHSA-fwg4-px6f-6fj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-g5p7-39ff-j5mv/GHSA-g5p7-39ff-j5mv.json b/advisories/unreviewed/2024/08/GHSA-g5p7-39ff-j5mv/GHSA-g5p7-39ff-j5mv.json index bba54ca78b2..d776c8833cf 100644 --- a/advisories/unreviewed/2024/08/GHSA-g5p7-39ff-j5mv/GHSA-g5p7-39ff-j5mv.json +++ b/advisories/unreviewed/2024/08/GHSA-g5p7-39ff-j5mv/GHSA-g5p7-39ff-j5mv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-g773-pwrm-8hmq/GHSA-g773-pwrm-8hmq.json b/advisories/unreviewed/2024/08/GHSA-g773-pwrm-8hmq/GHSA-g773-pwrm-8hmq.json index 671c789ef04..0c0c62a1bf4 100644 --- a/advisories/unreviewed/2024/08/GHSA-g773-pwrm-8hmq/GHSA-g773-pwrm-8hmq.json +++ b/advisories/unreviewed/2024/08/GHSA-g773-pwrm-8hmq/GHSA-g773-pwrm-8hmq.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-g9x3-hhpq-jcqm/GHSA-g9x3-hhpq-jcqm.json b/advisories/unreviewed/2024/08/GHSA-g9x3-hhpq-jcqm/GHSA-g9x3-hhpq-jcqm.json index 475e9cc9d78..c4c160493c1 100644 --- a/advisories/unreviewed/2024/08/GHSA-g9x3-hhpq-jcqm/GHSA-g9x3-hhpq-jcqm.json +++ b/advisories/unreviewed/2024/08/GHSA-g9x3-hhpq-jcqm/GHSA-g9x3-hhpq-jcqm.json @@ -7,12 +7,8 @@ "CVE-2024-42318" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nlandlock: Don't lose track of restrictions on cred_transfer\n\nWhen a process' cred struct is replaced, this _almost_ always invokes\nthe cred_prepare LSM hook; but in one special case (when\nKEYCTL_SESSION_TO_PARENT updates the parent's credentials), the\ncred_transfer LSM hook is used instead. Landlock only implements the\ncred_prepare hook, not cred_transfer, so KEYCTL_SESSION_TO_PARENT causes\nall information on Landlock restrictions to be lost.\n\nThis basically means that a process with the ability to use the fork()\nand keyctl() syscalls can get rid of all Landlock restrictions on\nitself.\n\nFix it by adding a cred_transfer hook that does the same thing as the\nexisting cred_prepare hook. (Implemented by having hook_cred_prepare()\ncall hook_cred_transfer() so that the two functions are less likely to\naccidentally diverge in the future.)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-gqp6-8ccj-768w/GHSA-gqp6-8ccj-768w.json b/advisories/unreviewed/2024/08/GHSA-gqp6-8ccj-768w/GHSA-gqp6-8ccj-768w.json index f85696b851e..7f2f7f3008b 100644 --- a/advisories/unreviewed/2024/08/GHSA-gqp6-8ccj-768w/GHSA-gqp6-8ccj-768w.json +++ b/advisories/unreviewed/2024/08/GHSA-gqp6-8ccj-768w/GHSA-gqp6-8ccj-768w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-gv8w-244w-5xfq/GHSA-gv8w-244w-5xfq.json b/advisories/unreviewed/2024/08/GHSA-gv8w-244w-5xfq/GHSA-gv8w-244w-5xfq.json index 0b3dbfb7995..15710c6ccfa 100644 --- a/advisories/unreviewed/2024/08/GHSA-gv8w-244w-5xfq/GHSA-gv8w-244w-5xfq.json +++ b/advisories/unreviewed/2024/08/GHSA-gv8w-244w-5xfq/GHSA-gv8w-244w-5xfq.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-gw6h-qxvj-hq8f/GHSA-gw6h-qxvj-hq8f.json b/advisories/unreviewed/2024/08/GHSA-gw6h-qxvj-hq8f/GHSA-gw6h-qxvj-hq8f.json index 9ea3691cf5c..045ffe09992 100644 --- a/advisories/unreviewed/2024/08/GHSA-gw6h-qxvj-hq8f/GHSA-gw6h-qxvj-hq8f.json +++ b/advisories/unreviewed/2024/08/GHSA-gw6h-qxvj-hq8f/GHSA-gw6h-qxvj-hq8f.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-gx44-2gg6-xj9m/GHSA-gx44-2gg6-xj9m.json b/advisories/unreviewed/2024/08/GHSA-gx44-2gg6-xj9m/GHSA-gx44-2gg6-xj9m.json index 08dabe71051..1e051d79fb2 100644 --- a/advisories/unreviewed/2024/08/GHSA-gx44-2gg6-xj9m/GHSA-gx44-2gg6-xj9m.json +++ b/advisories/unreviewed/2024/08/GHSA-gx44-2gg6-xj9m/GHSA-gx44-2gg6-xj9m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-h26c-rrrx-f2q4/GHSA-h26c-rrrx-f2q4.json b/advisories/unreviewed/2024/08/GHSA-h26c-rrrx-f2q4/GHSA-h26c-rrrx-f2q4.json index 758ae34c3b2..06dfdc0ce3c 100644 --- a/advisories/unreviewed/2024/08/GHSA-h26c-rrrx-f2q4/GHSA-h26c-rrrx-f2q4.json +++ b/advisories/unreviewed/2024/08/GHSA-h26c-rrrx-f2q4/GHSA-h26c-rrrx-f2q4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-h5x3-2xcq-h4j8/GHSA-h5x3-2xcq-h4j8.json b/advisories/unreviewed/2024/08/GHSA-h5x3-2xcq-h4j8/GHSA-h5x3-2xcq-h4j8.json index a2b7ddecd8d..454d5a318bc 100644 --- a/advisories/unreviewed/2024/08/GHSA-h5x3-2xcq-h4j8/GHSA-h5x3-2xcq-h4j8.json +++ b/advisories/unreviewed/2024/08/GHSA-h5x3-2xcq-h4j8/GHSA-h5x3-2xcq-h4j8.json @@ -7,12 +7,8 @@ "CVE-2024-43830" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: trigger: Unregister sysfs attributes before calling deactivate()\n\nTriggers which have trigger specific sysfs attributes typically store\nrelated data in trigger-data allocated by the activate() callback and\nfreed by the deactivate() callback.\n\nCalling device_remove_groups() after calling deactivate() leaves a window\nwhere the sysfs attributes show/store functions could be called after\ndeactivation and then operate on the just freed trigger-data.\n\nMove the device_remove_groups() call to before deactivate() to close\nthis race window.\n\nThis also makes the deactivation path properly do things in reverse order\nof the activation path which calls the activate() callback before calling\ndevice_add_groups().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-h8vf-5858-qv45/GHSA-h8vf-5858-qv45.json b/advisories/unreviewed/2024/08/GHSA-h8vf-5858-qv45/GHSA-h8vf-5858-qv45.json index 1ba010e7785..8ea0497c4fb 100644 --- a/advisories/unreviewed/2024/08/GHSA-h8vf-5858-qv45/GHSA-h8vf-5858-qv45.json +++ b/advisories/unreviewed/2024/08/GHSA-h8vf-5858-qv45/GHSA-h8vf-5858-qv45.json @@ -7,12 +7,8 @@ "CVE-2024-42290" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/imx-irqsteer: Handle runtime power management correctly\n\nThe power domain is automatically activated from clk_prepare(). However, on\ncertain platforms like i.MX8QM and i.MX8QXP, the power-on handling invokes\nsleeping functions, which triggers the 'scheduling while atomic' bug in the\ncontext switch path during device probing:\n\n BUG: scheduling while atomic: kworker/u13:1/48/0x00000002\n Call trace:\n __schedule_bug+0x54/0x6c\n __schedule+0x7f0/0xa94\n schedule+0x5c/0xc4\n schedule_preempt_disabled+0x24/0x40\n __mutex_lock.constprop.0+0x2c0/0x540\n __mutex_lock_slowpath+0x14/0x20\n mutex_lock+0x48/0x54\n clk_prepare_lock+0x44/0xa0\n clk_prepare+0x20/0x44\n imx_irqsteer_resume+0x28/0xe0\n pm_generic_runtime_resume+0x2c/0x44\n __genpd_runtime_resume+0x30/0x80\n genpd_runtime_resume+0xc8/0x2c0\n __rpm_callback+0x48/0x1d8\n rpm_callback+0x6c/0x78\n rpm_resume+0x490/0x6b4\n __pm_runtime_resume+0x50/0x94\n irq_chip_pm_get+0x2c/0xa0\n __irq_do_set_handler+0x178/0x24c\n irq_set_chained_handler_and_data+0x60/0xa4\n mxc_gpio_probe+0x160/0x4b0\n\nCure this by implementing the irq_bus_lock/sync_unlock() interrupt chip\ncallbacks and handle power management in them as they are invoked from\nnon-atomic context.\n\n[ tglx: Rewrote change log, added Fixes tag ]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-hj39-fcxv-929x/GHSA-hj39-fcxv-929x.json b/advisories/unreviewed/2024/08/GHSA-hj39-fcxv-929x/GHSA-hj39-fcxv-929x.json index 984aa7865b0..31d8fe2df12 100644 --- a/advisories/unreviewed/2024/08/GHSA-hj39-fcxv-929x/GHSA-hj39-fcxv-929x.json +++ b/advisories/unreviewed/2024/08/GHSA-hj39-fcxv-929x/GHSA-hj39-fcxv-929x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-hqmj-gmw5-9c4j/GHSA-hqmj-gmw5-9c4j.json b/advisories/unreviewed/2024/08/GHSA-hqmj-gmw5-9c4j/GHSA-hqmj-gmw5-9c4j.json index ec0431696ed..5e9ae7737e5 100644 --- a/advisories/unreviewed/2024/08/GHSA-hqmj-gmw5-9c4j/GHSA-hqmj-gmw5-9c4j.json +++ b/advisories/unreviewed/2024/08/GHSA-hqmj-gmw5-9c4j/GHSA-hqmj-gmw5-9c4j.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-j2xh-32vh-pwww/GHSA-j2xh-32vh-pwww.json b/advisories/unreviewed/2024/08/GHSA-j2xh-32vh-pwww/GHSA-j2xh-32vh-pwww.json index 683472fc78c..80dd9f3cb65 100644 --- a/advisories/unreviewed/2024/08/GHSA-j2xh-32vh-pwww/GHSA-j2xh-32vh-pwww.json +++ b/advisories/unreviewed/2024/08/GHSA-j2xh-32vh-pwww/GHSA-j2xh-32vh-pwww.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-j69j-c696-vxxx/GHSA-j69j-c696-vxxx.json b/advisories/unreviewed/2024/08/GHSA-j69j-c696-vxxx/GHSA-j69j-c696-vxxx.json index 034c090442b..f3ae344a2d5 100644 --- a/advisories/unreviewed/2024/08/GHSA-j69j-c696-vxxx/GHSA-j69j-c696-vxxx.json +++ b/advisories/unreviewed/2024/08/GHSA-j69j-c696-vxxx/GHSA-j69j-c696-vxxx.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-j72m-4pgw-w3qv/GHSA-j72m-4pgw-w3qv.json b/advisories/unreviewed/2024/08/GHSA-j72m-4pgw-w3qv/GHSA-j72m-4pgw-w3qv.json index 66b931cc77d..d3d385701f8 100644 --- a/advisories/unreviewed/2024/08/GHSA-j72m-4pgw-w3qv/GHSA-j72m-4pgw-w3qv.json +++ b/advisories/unreviewed/2024/08/GHSA-j72m-4pgw-w3qv/GHSA-j72m-4pgw-w3qv.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-jcx4-956v-33xq/GHSA-jcx4-956v-33xq.json b/advisories/unreviewed/2024/08/GHSA-jcx4-956v-33xq/GHSA-jcx4-956v-33xq.json index 510efbd25f1..86e5ee49eb6 100644 --- a/advisories/unreviewed/2024/08/GHSA-jcx4-956v-33xq/GHSA-jcx4-956v-33xq.json +++ b/advisories/unreviewed/2024/08/GHSA-jcx4-956v-33xq/GHSA-jcx4-956v-33xq.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-jg97-797c-2q53/GHSA-jg97-797c-2q53.json b/advisories/unreviewed/2024/08/GHSA-jg97-797c-2q53/GHSA-jg97-797c-2q53.json index ddf03147a28..4f93bbcebdc 100644 --- a/advisories/unreviewed/2024/08/GHSA-jg97-797c-2q53/GHSA-jg97-797c-2q53.json +++ b/advisories/unreviewed/2024/08/GHSA-jg97-797c-2q53/GHSA-jg97-797c-2q53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-jpv8-jjh5-pvv6/GHSA-jpv8-jjh5-pvv6.json b/advisories/unreviewed/2024/08/GHSA-jpv8-jjh5-pvv6/GHSA-jpv8-jjh5-pvv6.json index 8cf7675bab9..63a7abc0cda 100644 --- a/advisories/unreviewed/2024/08/GHSA-jpv8-jjh5-pvv6/GHSA-jpv8-jjh5-pvv6.json +++ b/advisories/unreviewed/2024/08/GHSA-jpv8-jjh5-pvv6/GHSA-jpv8-jjh5-pvv6.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-m286-22xw-xh8c/GHSA-m286-22xw-xh8c.json b/advisories/unreviewed/2024/08/GHSA-m286-22xw-xh8c/GHSA-m286-22xw-xh8c.json index 0bf62abde1c..b5e5331ed52 100644 --- a/advisories/unreviewed/2024/08/GHSA-m286-22xw-xh8c/GHSA-m286-22xw-xh8c.json +++ b/advisories/unreviewed/2024/08/GHSA-m286-22xw-xh8c/GHSA-m286-22xw-xh8c.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-m596-2qm4-xfwf/GHSA-m596-2qm4-xfwf.json b/advisories/unreviewed/2024/08/GHSA-m596-2qm4-xfwf/GHSA-m596-2qm4-xfwf.json index 5f8cf4740b7..01bfb7bcd20 100644 --- a/advisories/unreviewed/2024/08/GHSA-m596-2qm4-xfwf/GHSA-m596-2qm4-xfwf.json +++ b/advisories/unreviewed/2024/08/GHSA-m596-2qm4-xfwf/GHSA-m596-2qm4-xfwf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-m5gr-96cr-6qvm/GHSA-m5gr-96cr-6qvm.json b/advisories/unreviewed/2024/08/GHSA-m5gr-96cr-6qvm/GHSA-m5gr-96cr-6qvm.json index 9533f2373ce..4b2589028c1 100644 --- a/advisories/unreviewed/2024/08/GHSA-m5gr-96cr-6qvm/GHSA-m5gr-96cr-6qvm.json +++ b/advisories/unreviewed/2024/08/GHSA-m5gr-96cr-6qvm/GHSA-m5gr-96cr-6qvm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mc4x-r58f-6h93/GHSA-mc4x-r58f-6h93.json b/advisories/unreviewed/2024/08/GHSA-mc4x-r58f-6h93/GHSA-mc4x-r58f-6h93.json index f52f041bcc3..5574441345f 100644 --- a/advisories/unreviewed/2024/08/GHSA-mc4x-r58f-6h93/GHSA-mc4x-r58f-6h93.json +++ b/advisories/unreviewed/2024/08/GHSA-mc4x-r58f-6h93/GHSA-mc4x-r58f-6h93.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mhhw-j772-75h5/GHSA-mhhw-j772-75h5.json b/advisories/unreviewed/2024/08/GHSA-mhhw-j772-75h5/GHSA-mhhw-j772-75h5.json index d652f748537..81831bb97ce 100644 --- a/advisories/unreviewed/2024/08/GHSA-mhhw-j772-75h5/GHSA-mhhw-j772-75h5.json +++ b/advisories/unreviewed/2024/08/GHSA-mhhw-j772-75h5/GHSA-mhhw-j772-75h5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mj2x-c9j2-vp7g/GHSA-mj2x-c9j2-vp7g.json b/advisories/unreviewed/2024/08/GHSA-mj2x-c9j2-vp7g/GHSA-mj2x-c9j2-vp7g.json index 8efad7a1418..455e2f82ea4 100644 --- a/advisories/unreviewed/2024/08/GHSA-mj2x-c9j2-vp7g/GHSA-mj2x-c9j2-vp7g.json +++ b/advisories/unreviewed/2024/08/GHSA-mj2x-c9j2-vp7g/GHSA-mj2x-c9j2-vp7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mpcg-jpxc-257w/GHSA-mpcg-jpxc-257w.json b/advisories/unreviewed/2024/08/GHSA-mpcg-jpxc-257w/GHSA-mpcg-jpxc-257w.json index bb32f5b21fd..a362cbb6ccf 100644 --- a/advisories/unreviewed/2024/08/GHSA-mpcg-jpxc-257w/GHSA-mpcg-jpxc-257w.json +++ b/advisories/unreviewed/2024/08/GHSA-mpcg-jpxc-257w/GHSA-mpcg-jpxc-257w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mvg4-rgrq-f443/GHSA-mvg4-rgrq-f443.json b/advisories/unreviewed/2024/08/GHSA-mvg4-rgrq-f443/GHSA-mvg4-rgrq-f443.json index 2eabe1e60df..4b3752f961b 100644 --- a/advisories/unreviewed/2024/08/GHSA-mvg4-rgrq-f443/GHSA-mvg4-rgrq-f443.json +++ b/advisories/unreviewed/2024/08/GHSA-mvg4-rgrq-f443/GHSA-mvg4-rgrq-f443.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mvr6-gmwj-mq86/GHSA-mvr6-gmwj-mq86.json b/advisories/unreviewed/2024/08/GHSA-mvr6-gmwj-mq86/GHSA-mvr6-gmwj-mq86.json index a1ff9eb7dd3..e80fa0f2281 100644 --- a/advisories/unreviewed/2024/08/GHSA-mvr6-gmwj-mq86/GHSA-mvr6-gmwj-mq86.json +++ b/advisories/unreviewed/2024/08/GHSA-mvr6-gmwj-mq86/GHSA-mvr6-gmwj-mq86.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mw3w-8r3q-gm92/GHSA-mw3w-8r3q-gm92.json b/advisories/unreviewed/2024/08/GHSA-mw3w-8r3q-gm92/GHSA-mw3w-8r3q-gm92.json index 83f41bffd82..c87169bdf7b 100644 --- a/advisories/unreviewed/2024/08/GHSA-mw3w-8r3q-gm92/GHSA-mw3w-8r3q-gm92.json +++ b/advisories/unreviewed/2024/08/GHSA-mw3w-8r3q-gm92/GHSA-mw3w-8r3q-gm92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mxpv-5m73-vxvv/GHSA-mxpv-5m73-vxvv.json b/advisories/unreviewed/2024/08/GHSA-mxpv-5m73-vxvv/GHSA-mxpv-5m73-vxvv.json index 2f8effc2ae8..ec83a8dd0e8 100644 --- a/advisories/unreviewed/2024/08/GHSA-mxpv-5m73-vxvv/GHSA-mxpv-5m73-vxvv.json +++ b/advisories/unreviewed/2024/08/GHSA-mxpv-5m73-vxvv/GHSA-mxpv-5m73-vxvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p29g-9w74-gc5m/GHSA-p29g-9w74-gc5m.json b/advisories/unreviewed/2024/08/GHSA-p29g-9w74-gc5m/GHSA-p29g-9w74-gc5m.json index 581c68db8f0..c00379d8103 100644 --- a/advisories/unreviewed/2024/08/GHSA-p29g-9w74-gc5m/GHSA-p29g-9w74-gc5m.json +++ b/advisories/unreviewed/2024/08/GHSA-p29g-9w74-gc5m/GHSA-p29g-9w74-gc5m.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p4jg-pm94-8pxc/GHSA-p4jg-pm94-8pxc.json b/advisories/unreviewed/2024/08/GHSA-p4jg-pm94-8pxc/GHSA-p4jg-pm94-8pxc.json index db732b9b620..f96053af84c 100644 --- a/advisories/unreviewed/2024/08/GHSA-p4jg-pm94-8pxc/GHSA-p4jg-pm94-8pxc.json +++ b/advisories/unreviewed/2024/08/GHSA-p4jg-pm94-8pxc/GHSA-p4jg-pm94-8pxc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p522-8xvv-fcr2/GHSA-p522-8xvv-fcr2.json b/advisories/unreviewed/2024/08/GHSA-p522-8xvv-fcr2/GHSA-p522-8xvv-fcr2.json index b10e466d07f..4c224a9d34e 100644 --- a/advisories/unreviewed/2024/08/GHSA-p522-8xvv-fcr2/GHSA-p522-8xvv-fcr2.json +++ b/advisories/unreviewed/2024/08/GHSA-p522-8xvv-fcr2/GHSA-p522-8xvv-fcr2.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p89v-3g23-m6q2/GHSA-p89v-3g23-m6q2.json b/advisories/unreviewed/2024/08/GHSA-p89v-3g23-m6q2/GHSA-p89v-3g23-m6q2.json index 14e068e325d..61f454aa647 100644 --- a/advisories/unreviewed/2024/08/GHSA-p89v-3g23-m6q2/GHSA-p89v-3g23-m6q2.json +++ b/advisories/unreviewed/2024/08/GHSA-p89v-3g23-m6q2/GHSA-p89v-3g23-m6q2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-pcf4-rwp2-6pv4/GHSA-pcf4-rwp2-6pv4.json b/advisories/unreviewed/2024/08/GHSA-pcf4-rwp2-6pv4/GHSA-pcf4-rwp2-6pv4.json index c8a102907f9..1a3a676d325 100644 --- a/advisories/unreviewed/2024/08/GHSA-pcf4-rwp2-6pv4/GHSA-pcf4-rwp2-6pv4.json +++ b/advisories/unreviewed/2024/08/GHSA-pcf4-rwp2-6pv4/GHSA-pcf4-rwp2-6pv4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-ph35-p7mp-cgxf/GHSA-ph35-p7mp-cgxf.json b/advisories/unreviewed/2024/08/GHSA-ph35-p7mp-cgxf/GHSA-ph35-p7mp-cgxf.json index 1af0d97328c..03d2c7bc12a 100644 --- a/advisories/unreviewed/2024/08/GHSA-ph35-p7mp-cgxf/GHSA-ph35-p7mp-cgxf.json +++ b/advisories/unreviewed/2024/08/GHSA-ph35-p7mp-cgxf/GHSA-ph35-p7mp-cgxf.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-phj6-w4wf-6mrr/GHSA-phj6-w4wf-6mrr.json b/advisories/unreviewed/2024/08/GHSA-phj6-w4wf-6mrr/GHSA-phj6-w4wf-6mrr.json index cbaeed19158..343c750d49f 100644 --- a/advisories/unreviewed/2024/08/GHSA-phj6-w4wf-6mrr/GHSA-phj6-w4wf-6mrr.json +++ b/advisories/unreviewed/2024/08/GHSA-phj6-w4wf-6mrr/GHSA-phj6-w4wf-6mrr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-pmc4-69mh-84gv/GHSA-pmc4-69mh-84gv.json b/advisories/unreviewed/2024/08/GHSA-pmc4-69mh-84gv/GHSA-pmc4-69mh-84gv.json index 5179970a4a0..aa1a903a8ba 100644 --- a/advisories/unreviewed/2024/08/GHSA-pmc4-69mh-84gv/GHSA-pmc4-69mh-84gv.json +++ b/advisories/unreviewed/2024/08/GHSA-pmc4-69mh-84gv/GHSA-pmc4-69mh-84gv.json @@ -7,12 +7,8 @@ "CVE-2024-42299" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Update log->page_{mask,bits} if log->page_size changed\n\nIf an NTFS file system is mounted to another system with different\nPAGE_SIZE from the original system, log->page_size will change in\nlog_replay(), but log->page_{mask,bits} don't change correspondingly.\nThis will cause a panic because \"u32 bytes = log->page_size - page_off\"\nwill get a negative value in the later read_log_page().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-pvj4-5rhw-5cww/GHSA-pvj4-5rhw-5cww.json b/advisories/unreviewed/2024/08/GHSA-pvj4-5rhw-5cww/GHSA-pvj4-5rhw-5cww.json index 38fc28461d8..8ca18fb2e8d 100644 --- a/advisories/unreviewed/2024/08/GHSA-pvj4-5rhw-5cww/GHSA-pvj4-5rhw-5cww.json +++ b/advisories/unreviewed/2024/08/GHSA-pvj4-5rhw-5cww/GHSA-pvj4-5rhw-5cww.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-pw7c-2549-52jp/GHSA-pw7c-2549-52jp.json b/advisories/unreviewed/2024/08/GHSA-pw7c-2549-52jp/GHSA-pw7c-2549-52jp.json index d76c077b599..5f6065c551e 100644 --- a/advisories/unreviewed/2024/08/GHSA-pw7c-2549-52jp/GHSA-pw7c-2549-52jp.json +++ b/advisories/unreviewed/2024/08/GHSA-pw7c-2549-52jp/GHSA-pw7c-2549-52jp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-pwc6-45qr-9764/GHSA-pwc6-45qr-9764.json b/advisories/unreviewed/2024/08/GHSA-pwc6-45qr-9764/GHSA-pwc6-45qr-9764.json index 921b84fbe1a..07e6caced4c 100644 --- a/advisories/unreviewed/2024/08/GHSA-pwc6-45qr-9764/GHSA-pwc6-45qr-9764.json +++ b/advisories/unreviewed/2024/08/GHSA-pwc6-45qr-9764/GHSA-pwc6-45qr-9764.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json b/advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json index 32a88e8dca9..42a2b729a50 100644 --- a/advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json +++ b/advisories/unreviewed/2024/08/GHSA-q2wf-pr3p-9rhr/GHSA-q2wf-pr3p-9rhr.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q4p2-vxpc-3r2v/GHSA-q4p2-vxpc-3r2v.json b/advisories/unreviewed/2024/08/GHSA-q4p2-vxpc-3r2v/GHSA-q4p2-vxpc-3r2v.json index d828aaea9e9..4eb3b588eb2 100644 --- a/advisories/unreviewed/2024/08/GHSA-q4p2-vxpc-3r2v/GHSA-q4p2-vxpc-3r2v.json +++ b/advisories/unreviewed/2024/08/GHSA-q4p2-vxpc-3r2v/GHSA-q4p2-vxpc-3r2v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q636-fx55-gfr2/GHSA-q636-fx55-gfr2.json b/advisories/unreviewed/2024/08/GHSA-q636-fx55-gfr2/GHSA-q636-fx55-gfr2.json index 980c5a615df..d5ef2cabbb6 100644 --- a/advisories/unreviewed/2024/08/GHSA-q636-fx55-gfr2/GHSA-q636-fx55-gfr2.json +++ b/advisories/unreviewed/2024/08/GHSA-q636-fx55-gfr2/GHSA-q636-fx55-gfr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-q93r-9jfp-vjjr/GHSA-q93r-9jfp-vjjr.json b/advisories/unreviewed/2024/08/GHSA-q93r-9jfp-vjjr/GHSA-q93r-9jfp-vjjr.json index 70700dd1226..ad1540079a6 100644 --- a/advisories/unreviewed/2024/08/GHSA-q93r-9jfp-vjjr/GHSA-q93r-9jfp-vjjr.json +++ b/advisories/unreviewed/2024/08/GHSA-q93r-9jfp-vjjr/GHSA-q93r-9jfp-vjjr.json @@ -7,12 +7,8 @@ "CVE-2024-7958" ], "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-qf65-4f88-5xjw/GHSA-qf65-4f88-5xjw.json b/advisories/unreviewed/2024/08/GHSA-qf65-4f88-5xjw/GHSA-qf65-4f88-5xjw.json index f0521babe47..91bfe642379 100644 --- a/advisories/unreviewed/2024/08/GHSA-qf65-4f88-5xjw/GHSA-qf65-4f88-5xjw.json +++ b/advisories/unreviewed/2024/08/GHSA-qf65-4f88-5xjw/GHSA-qf65-4f88-5xjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qhm8-r99p-v4h8/GHSA-qhm8-r99p-v4h8.json b/advisories/unreviewed/2024/08/GHSA-qhm8-r99p-v4h8/GHSA-qhm8-r99p-v4h8.json index 6943c1f4e00..31f0c578072 100644 --- a/advisories/unreviewed/2024/08/GHSA-qhm8-r99p-v4h8/GHSA-qhm8-r99p-v4h8.json +++ b/advisories/unreviewed/2024/08/GHSA-qhm8-r99p-v4h8/GHSA-qhm8-r99p-v4h8.json @@ -7,12 +7,8 @@ "CVE-2024-43826" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: pass explicit offset/count to trace events\n\nnfs_folio_length is unsafe to use without having the folio locked and a\ncheck for a NULL ->f_mapping that protects against truncations and can\nlead to kernel crashes. E.g. when running xfstests generic/065 with\nall nfs trace points enabled.\n\nFollow the model of the XFS trace points and pass in an explŃ–cit offset\nand length. This has the additional benefit that these values can\nbe more accurate as some of the users touch partial folio ranges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-qj78-v57f-v8c2/GHSA-qj78-v57f-v8c2.json b/advisories/unreviewed/2024/08/GHSA-qj78-v57f-v8c2/GHSA-qj78-v57f-v8c2.json index 9ae98176de3..49050cfa991 100644 --- a/advisories/unreviewed/2024/08/GHSA-qj78-v57f-v8c2/GHSA-qj78-v57f-v8c2.json +++ b/advisories/unreviewed/2024/08/GHSA-qj78-v57f-v8c2/GHSA-qj78-v57f-v8c2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qjff-gw69-2vjw/GHSA-qjff-gw69-2vjw.json b/advisories/unreviewed/2024/08/GHSA-qjff-gw69-2vjw/GHSA-qjff-gw69-2vjw.json index 0c0611dabe7..6823d8ea69c 100644 --- a/advisories/unreviewed/2024/08/GHSA-qjff-gw69-2vjw/GHSA-qjff-gw69-2vjw.json +++ b/advisories/unreviewed/2024/08/GHSA-qjff-gw69-2vjw/GHSA-qjff-gw69-2vjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qpm4-pf72-h452/GHSA-qpm4-pf72-h452.json b/advisories/unreviewed/2024/08/GHSA-qpm4-pf72-h452/GHSA-qpm4-pf72-h452.json index 6d6ee499954..c1f072a9ac5 100644 --- a/advisories/unreviewed/2024/08/GHSA-qpm4-pf72-h452/GHSA-qpm4-pf72-h452.json +++ b/advisories/unreviewed/2024/08/GHSA-qpm4-pf72-h452/GHSA-qpm4-pf72-h452.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-r449-444r-3mjw/GHSA-r449-444r-3mjw.json b/advisories/unreviewed/2024/08/GHSA-r449-444r-3mjw/GHSA-r449-444r-3mjw.json index a4d8f1150ee..802e13c96bd 100644 --- a/advisories/unreviewed/2024/08/GHSA-r449-444r-3mjw/GHSA-r449-444r-3mjw.json +++ b/advisories/unreviewed/2024/08/GHSA-r449-444r-3mjw/GHSA-r449-444r-3mjw.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-rh9m-62gr-m993/GHSA-rh9m-62gr-m993.json b/advisories/unreviewed/2024/08/GHSA-rh9m-62gr-m993/GHSA-rh9m-62gr-m993.json index 6f47a2d6357..d5aba93a7ba 100644 --- a/advisories/unreviewed/2024/08/GHSA-rh9m-62gr-m993/GHSA-rh9m-62gr-m993.json +++ b/advisories/unreviewed/2024/08/GHSA-rh9m-62gr-m993/GHSA-rh9m-62gr-m993.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-v546-2fcj-rwvx/GHSA-v546-2fcj-rwvx.json b/advisories/unreviewed/2024/08/GHSA-v546-2fcj-rwvx/GHSA-v546-2fcj-rwvx.json index 71f94f46bca..4c3cf816e20 100644 --- a/advisories/unreviewed/2024/08/GHSA-v546-2fcj-rwvx/GHSA-v546-2fcj-rwvx.json +++ b/advisories/unreviewed/2024/08/GHSA-v546-2fcj-rwvx/GHSA-v546-2fcj-rwvx.json @@ -7,12 +7,8 @@ "CVE-2024-42304" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: make sure the first directory block is not a hole\n\nThe syzbot constructs a directory that has no dirblock but is non-inline,\ni.e. the first directory block is a hole. And no errors are reported when\ncreating files in this directory in the following flow.\n\n ext4_mknod\n ...\n ext4_add_entry\n // Read block 0\n ext4_read_dirblock(dir, block, DIRENT)\n bh = ext4_bread(NULL, inode, block, 0)\n if (!bh && (type == INDEX || type == DIRENT_HTREE))\n // The first directory block is a hole\n // But type == DIRENT, so no error is reported.\n\nAfter that, we get a directory block without '.' and '..' but with a valid\ndentry. This may cause some code that relies on dot or dotdot (such as\nmake_indexed_dir()) to crash.\n\nTherefore when ext4_read_dirblock() finds that the first directory block\nis a hole report that the filesystem is corrupted and return an error to\navoid loading corrupted data from disk causing something bad.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-v82j-fhf7-mwx2/GHSA-v82j-fhf7-mwx2.json b/advisories/unreviewed/2024/08/GHSA-v82j-fhf7-mwx2/GHSA-v82j-fhf7-mwx2.json index f2a8a439682..c8b8026ba39 100644 --- a/advisories/unreviewed/2024/08/GHSA-v82j-fhf7-mwx2/GHSA-v82j-fhf7-mwx2.json +++ b/advisories/unreviewed/2024/08/GHSA-v82j-fhf7-mwx2/GHSA-v82j-fhf7-mwx2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-vcx9-38wq-hx3h/GHSA-vcx9-38wq-hx3h.json b/advisories/unreviewed/2024/08/GHSA-vcx9-38wq-hx3h/GHSA-vcx9-38wq-hx3h.json index 0987d0aefad..8f9c369e065 100644 --- a/advisories/unreviewed/2024/08/GHSA-vcx9-38wq-hx3h/GHSA-vcx9-38wq-hx3h.json +++ b/advisories/unreviewed/2024/08/GHSA-vcx9-38wq-hx3h/GHSA-vcx9-38wq-hx3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-vg68-p87q-gx57/GHSA-vg68-p87q-gx57.json b/advisories/unreviewed/2024/08/GHSA-vg68-p87q-gx57/GHSA-vg68-p87q-gx57.json index 94ec6a0509b..0e82155f524 100644 --- a/advisories/unreviewed/2024/08/GHSA-vg68-p87q-gx57/GHSA-vg68-p87q-gx57.json +++ b/advisories/unreviewed/2024/08/GHSA-vg68-p87q-gx57/GHSA-vg68-p87q-gx57.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-w2ww-w274-8rxv/GHSA-w2ww-w274-8rxv.json b/advisories/unreviewed/2024/08/GHSA-w2ww-w274-8rxv/GHSA-w2ww-w274-8rxv.json index 44f1649fa7f..d9c7b640188 100644 --- a/advisories/unreviewed/2024/08/GHSA-w2ww-w274-8rxv/GHSA-w2ww-w274-8rxv.json +++ b/advisories/unreviewed/2024/08/GHSA-w2ww-w274-8rxv/GHSA-w2ww-w274-8rxv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wf24-wx24-rpxv/GHSA-wf24-wx24-rpxv.json b/advisories/unreviewed/2024/08/GHSA-wf24-wx24-rpxv/GHSA-wf24-wx24-rpxv.json index 28cc68eac27..65f99ee2b41 100644 --- a/advisories/unreviewed/2024/08/GHSA-wf24-wx24-rpxv/GHSA-wf24-wx24-rpxv.json +++ b/advisories/unreviewed/2024/08/GHSA-wf24-wx24-rpxv/GHSA-wf24-wx24-rpxv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wfg9-r8xh-vw3h/GHSA-wfg9-r8xh-vw3h.json b/advisories/unreviewed/2024/08/GHSA-wfg9-r8xh-vw3h/GHSA-wfg9-r8xh-vw3h.json index 0b231d3088b..6645a1f4932 100644 --- a/advisories/unreviewed/2024/08/GHSA-wfg9-r8xh-vw3h/GHSA-wfg9-r8xh-vw3h.json +++ b/advisories/unreviewed/2024/08/GHSA-wfg9-r8xh-vw3h/GHSA-wfg9-r8xh-vw3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wgh2-2342-mm46/GHSA-wgh2-2342-mm46.json b/advisories/unreviewed/2024/08/GHSA-wgh2-2342-mm46/GHSA-wgh2-2342-mm46.json index c44df7f7bdb..f337e42b27a 100644 --- a/advisories/unreviewed/2024/08/GHSA-wgh2-2342-mm46/GHSA-wgh2-2342-mm46.json +++ b/advisories/unreviewed/2024/08/GHSA-wgh2-2342-mm46/GHSA-wgh2-2342-mm46.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wj7q-8mcw-g989/GHSA-wj7q-8mcw-g989.json b/advisories/unreviewed/2024/08/GHSA-wj7q-8mcw-g989/GHSA-wj7q-8mcw-g989.json index d700d3c5fe4..f890b672338 100644 --- a/advisories/unreviewed/2024/08/GHSA-wj7q-8mcw-g989/GHSA-wj7q-8mcw-g989.json +++ b/advisories/unreviewed/2024/08/GHSA-wj7q-8mcw-g989/GHSA-wj7q-8mcw-g989.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wm2h-r2j5-8pjc/GHSA-wm2h-r2j5-8pjc.json b/advisories/unreviewed/2024/08/GHSA-wm2h-r2j5-8pjc/GHSA-wm2h-r2j5-8pjc.json index a2f22702845..7c3212f615c 100644 --- a/advisories/unreviewed/2024/08/GHSA-wm2h-r2j5-8pjc/GHSA-wm2h-r2j5-8pjc.json +++ b/advisories/unreviewed/2024/08/GHSA-wm2h-r2j5-8pjc/GHSA-wm2h-r2j5-8pjc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wq8m-xw4p-7r82/GHSA-wq8m-xw4p-7r82.json b/advisories/unreviewed/2024/08/GHSA-wq8m-xw4p-7r82/GHSA-wq8m-xw4p-7r82.json index d69d4a5f696..7432229ea42 100644 --- a/advisories/unreviewed/2024/08/GHSA-wq8m-xw4p-7r82/GHSA-wq8m-xw4p-7r82.json +++ b/advisories/unreviewed/2024/08/GHSA-wq8m-xw4p-7r82/GHSA-wq8m-xw4p-7r82.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wrp2-hmjf-4443/GHSA-wrp2-hmjf-4443.json b/advisories/unreviewed/2024/08/GHSA-wrp2-hmjf-4443/GHSA-wrp2-hmjf-4443.json index de5142af48a..dd4a465a7e4 100644 --- a/advisories/unreviewed/2024/08/GHSA-wrp2-hmjf-4443/GHSA-wrp2-hmjf-4443.json +++ b/advisories/unreviewed/2024/08/GHSA-wrp2-hmjf-4443/GHSA-wrp2-hmjf-4443.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wrw4-qghx-vfxm/GHSA-wrw4-qghx-vfxm.json b/advisories/unreviewed/2024/08/GHSA-wrw4-qghx-vfxm/GHSA-wrw4-qghx-vfxm.json index da723c6de9a..cfea77db36e 100644 --- a/advisories/unreviewed/2024/08/GHSA-wrw4-qghx-vfxm/GHSA-wrw4-qghx-vfxm.json +++ b/advisories/unreviewed/2024/08/GHSA-wrw4-qghx-vfxm/GHSA-wrw4-qghx-vfxm.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wvmh-96f5-wjw2/GHSA-wvmh-96f5-wjw2.json b/advisories/unreviewed/2024/08/GHSA-wvmh-96f5-wjw2/GHSA-wvmh-96f5-wjw2.json index 37368ff41cd..8106d0962df 100644 --- a/advisories/unreviewed/2024/08/GHSA-wvmh-96f5-wjw2/GHSA-wvmh-96f5-wjw2.json +++ b/advisories/unreviewed/2024/08/GHSA-wvmh-96f5-wjw2/GHSA-wvmh-96f5-wjw2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wwj3-xjmp-vq7m/GHSA-wwj3-xjmp-vq7m.json b/advisories/unreviewed/2024/08/GHSA-wwj3-xjmp-vq7m/GHSA-wwj3-xjmp-vq7m.json index bc984d17cb0..75d55d03f4c 100644 --- a/advisories/unreviewed/2024/08/GHSA-wwj3-xjmp-vq7m/GHSA-wwj3-xjmp-vq7m.json +++ b/advisories/unreviewed/2024/08/GHSA-wwj3-xjmp-vq7m/GHSA-wwj3-xjmp-vq7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wwjj-v7xr-q436/GHSA-wwjj-v7xr-q436.json b/advisories/unreviewed/2024/08/GHSA-wwjj-v7xr-q436/GHSA-wwjj-v7xr-q436.json index e64711b3b74..d2264b46e2b 100644 --- a/advisories/unreviewed/2024/08/GHSA-wwjj-v7xr-q436/GHSA-wwjj-v7xr-q436.json +++ b/advisories/unreviewed/2024/08/GHSA-wwjj-v7xr-q436/GHSA-wwjj-v7xr-q436.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-x2j5-xrw3-x399/GHSA-x2j5-xrw3-x399.json b/advisories/unreviewed/2024/08/GHSA-x2j5-xrw3-x399/GHSA-x2j5-xrw3-x399.json index 726f06e9ff7..9cbe91d0276 100644 --- a/advisories/unreviewed/2024/08/GHSA-x2j5-xrw3-x399/GHSA-x2j5-xrw3-x399.json +++ b/advisories/unreviewed/2024/08/GHSA-x2j5-xrw3-x399/GHSA-x2j5-xrw3-x399.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-x6j3-2cg8-g68w/GHSA-x6j3-2cg8-g68w.json b/advisories/unreviewed/2024/08/GHSA-x6j3-2cg8-g68w/GHSA-x6j3-2cg8-g68w.json index 76e99648249..ce10505acd8 100644 --- a/advisories/unreviewed/2024/08/GHSA-x6j3-2cg8-g68w/GHSA-x6j3-2cg8-g68w.json +++ b/advisories/unreviewed/2024/08/GHSA-x6j3-2cg8-g68w/GHSA-x6j3-2cg8-g68w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-x7mx-xj8x-r7p3/GHSA-x7mx-xj8x-r7p3.json b/advisories/unreviewed/2024/08/GHSA-x7mx-xj8x-r7p3/GHSA-x7mx-xj8x-r7p3.json index e832cd6d3fc..67885b93fca 100644 --- a/advisories/unreviewed/2024/08/GHSA-x7mx-xj8x-r7p3/GHSA-x7mx-xj8x-r7p3.json +++ b/advisories/unreviewed/2024/08/GHSA-x7mx-xj8x-r7p3/GHSA-x7mx-xj8x-r7p3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-x9qv-64rq-2vc3/GHSA-x9qv-64rq-2vc3.json b/advisories/unreviewed/2024/08/GHSA-x9qv-64rq-2vc3/GHSA-x9qv-64rq-2vc3.json index 3343349c8c1..f2711a8494c 100644 --- a/advisories/unreviewed/2024/08/GHSA-x9qv-64rq-2vc3/GHSA-x9qv-64rq-2vc3.json +++ b/advisories/unreviewed/2024/08/GHSA-x9qv-64rq-2vc3/GHSA-x9qv-64rq-2vc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xj37-6j2f-32m7/GHSA-xj37-6j2f-32m7.json b/advisories/unreviewed/2024/08/GHSA-xj37-6j2f-32m7/GHSA-xj37-6j2f-32m7.json index c2da7759f44..993116ac1d9 100644 --- a/advisories/unreviewed/2024/08/GHSA-xj37-6j2f-32m7/GHSA-xj37-6j2f-32m7.json +++ b/advisories/unreviewed/2024/08/GHSA-xj37-6j2f-32m7/GHSA-xj37-6j2f-32m7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xm84-j48f-46w5/GHSA-xm84-j48f-46w5.json b/advisories/unreviewed/2024/08/GHSA-xm84-j48f-46w5/GHSA-xm84-j48f-46w5.json index ad713f90c22..23409f7c973 100644 --- a/advisories/unreviewed/2024/08/GHSA-xm84-j48f-46w5/GHSA-xm84-j48f-46w5.json +++ b/advisories/unreviewed/2024/08/GHSA-xm84-j48f-46w5/GHSA-xm84-j48f-46w5.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xv4g-g9fh-fqrj/GHSA-xv4g-g9fh-fqrj.json b/advisories/unreviewed/2024/08/GHSA-xv4g-g9fh-fqrj/GHSA-xv4g-g9fh-fqrj.json index bbcb74e7f41..824ff8b88e0 100644 --- a/advisories/unreviewed/2024/08/GHSA-xv4g-g9fh-fqrj/GHSA-xv4g-g9fh-fqrj.json +++ b/advisories/unreviewed/2024/08/GHSA-xv4g-g9fh-fqrj/GHSA-xv4g-g9fh-fqrj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-xvgc-j98h-3v9x/GHSA-xvgc-j98h-3v9x.json b/advisories/unreviewed/2024/08/GHSA-xvgc-j98h-3v9x/GHSA-xvgc-j98h-3v9x.json index dd453e91835..e7aade775cf 100644 --- a/advisories/unreviewed/2024/08/GHSA-xvgc-j98h-3v9x/GHSA-xvgc-j98h-3v9x.json +++ b/advisories/unreviewed/2024/08/GHSA-xvgc-j98h-3v9x/GHSA-xvgc-j98h-3v9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-xw9h-mxp6-gf7c/GHSA-xw9h-mxp6-gf7c.json b/advisories/unreviewed/2024/08/GHSA-xw9h-mxp6-gf7c/GHSA-xw9h-mxp6-gf7c.json index 902e35ce683..125608ae883 100644 --- a/advisories/unreviewed/2024/08/GHSA-xw9h-mxp6-gf7c/GHSA-xw9h-mxp6-gf7c.json +++ b/advisories/unreviewed/2024/08/GHSA-xw9h-mxp6-gf7c/GHSA-xw9h-mxp6-gf7c.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xxmg-rp7c-344j/GHSA-xxmg-rp7c-344j.json b/advisories/unreviewed/2024/08/GHSA-xxmg-rp7c-344j/GHSA-xxmg-rp7c-344j.json index 815c391ef82..5fdc08d43dc 100644 --- a/advisories/unreviewed/2024/08/GHSA-xxmg-rp7c-344j/GHSA-xxmg-rp7c-344j.json +++ b/advisories/unreviewed/2024/08/GHSA-xxmg-rp7c-344j/GHSA-xxmg-rp7c-344j.json @@ -7,12 +7,8 @@ "CVE-2024-42274" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"ALSA: firewire-lib: operate for period elapse event in process context\"\n\nCommit 7ba5ca32fe6e (\"ALSA: firewire-lib: operate for period elapse event\nin process context\") removed the process context workqueue from\namdtp_domain_stream_pcm_pointer() and update_pcm_pointers() to remove\nits overhead.\n\nWith RME Fireface 800, this lead to a regression since\nKernels 5.14.0, causing an AB/BA deadlock competition for the\nsubstream lock with eventual system freeze under ALSA operation:\n\nthread 0:\n * (lock A) acquire substream lock by\n\tsnd_pcm_stream_lock_irq() in\n\tsnd_pcm_status64()\n * (lock B) wait for tasklet to finish by calling\n \ttasklet_unlock_spin_wait() in\n\ttasklet_disable_in_atomic() in\n\tohci_flush_iso_completions() of ohci.c\n\nthread 1:\n * (lock B) enter tasklet\n * (lock A) attempt to acquire substream lock,\n \twaiting for it to be released:\n\tsnd_pcm_stream_lock_irqsave() in\n \tsnd_pcm_period_elapsed() in\n\tupdate_pcm_pointers() in\n\tprocess_ctx_payloads() in\n\tprocess_rx_packets() of amdtp-stream.c\n\n? tasklet_unlock_spin_wait\n \n \nohci_flush_iso_completions firewire_ohci\namdtp_domain_stream_pcm_pointer snd_firewire_lib\nsnd_pcm_update_hw_ptr0 snd_pcm\nsnd_pcm_status64 snd_pcm\n\n? native_queued_spin_lock_slowpath\n \n \n_raw_spin_lock_irqsave\nsnd_pcm_period_elapsed snd_pcm\nprocess_rx_packets snd_firewire_lib\nirq_target_callback snd_firewire_lib\nhandle_it_packet firewire_ohci\ncontext_tasklet firewire_ohci\n\nRestore the process context work queue to prevent deadlock\nAB/BA deadlock competition for ALSA substream lock of\nsnd_pcm_stream_lock_irq() in snd_pcm_status64()\nand snd_pcm_stream_lock_irqsave() in snd_pcm_period_elapsed().\n\nrevert commit 7ba5ca32fe6e (\"ALSA: firewire-lib: operate for period\nelapse event in process context\")\n\nReplace inline description to prevent future deadlock.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null,