diff --git a/advisories/unreviewed/2024/11/GHSA-q59j-vv4j-v33c/GHSA-q59j-vv4j-v33c.json b/advisories/github-reviewed/2024/11/GHSA-q59j-vv4j-v33c/GHSA-q59j-vv4j-v33c.json similarity index 57% rename from advisories/unreviewed/2024/11/GHSA-q59j-vv4j-v33c/GHSA-q59j-vv4j-v33c.json rename to advisories/github-reviewed/2024/11/GHSA-q59j-vv4j-v33c/GHSA-q59j-vv4j-v33c.json index f94a4ceff98..27b1afedfc5 100644 --- a/advisories/unreviewed/2024/11/GHSA-q59j-vv4j-v33c/GHSA-q59j-vv4j-v33c.json +++ b/advisories/github-reviewed/2024/11/GHSA-q59j-vv4j-v33c/GHSA-q59j-vv4j-v33c.json @@ -1,19 +1,44 @@ { "schema_version": "1.4.0", "id": "GHSA-q59j-vv4j-v33c", - "modified": "2024-12-04T18:32:35Z", + "modified": "2024-12-04T22:44:38Z", "published": "2024-11-29T18:34:03Z", "aliases": [ "CVE-2024-36620" ], + "summary": "NULL Pointer Dereference on moby image history", "details": "moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Go", + "name": "github.com/moby/moby" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "25.0.0" + }, + { + "fixed": "26.1.0" + } + ] + } + ] } ], - "affected": [], "references": [ { "type": "ADVISORY", @@ -27,6 +52,10 @@ "type": "WEB", "url": "https://gist.github.com/1047524396/f08816669701ab478a265a811d2c89b2" }, + { + "type": "PACKAGE", + "url": "https://github.com/moby/moby" + }, { "type": "WEB", "url": "https://github.com/moby/moby/blob/v26.0.2/daemon/images/image_history.go#L48" @@ -37,8 +66,8 @@ "CWE-476" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-12-04T22:44:38Z", "nvd_published_at": "2024-11-29T18:15:07Z" } } \ No newline at end of file