netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-6476-g47x-h3c7
GHSA-cxm4-7qcw-267r
GHSA-cxm4-7qcw-267r
This commit is contained in:
advisory-database[bot]
2024-05-01 11:23:57 +00:00
parent 330c12fa38
commit 81c2ce7b39
3 changed files with 132 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-6476-g47x-h3c7/GHSA-6476-g47x-h3c7.json → advisories/github-reviewed/2022/05/GHSA-6476-g47x-h3c7/GHSA-6476-g47x-h3c7.json
+32 -9
View File
@@ -1,17 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6476-g47x-h3c7",
"modified": "2022-05-17T01:48:25Z",
"modified": "2024-05-01T11:23:15Z",
"published": "2022-05-17T01:48:25Z",
"aliases": [
"CVE-2012-1176"
],
"summary": "PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function",
"details": "Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "pyfribidi"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.11.0"
}
]
}
]
}
],
"references": [
{
@@ -20,7 +39,7 @@
},
{
"type": "WEB",
"url": "https://github.com/pediapress/pyfribidi/issues/2%29:"
"url": "https://github.com/pediapress/pyfribidi/issues/2"
},
{
"type": "WEB",
@@ -38,6 +57,14 @@
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74001"
},
{
"type": "PACKAGE",
"url": "https://github.com/pediapress/pyfribidi"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20200228170815/http://www.securityfocus.com/bid/52451"
},
{
"type": "WEB",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663189"
@@ -65,10 +92,6 @@
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2012/03/14/9"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/52451"
}
],
"database_specific": {
@@ -76,8 +99,8 @@
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-05-01T11:23:15Z",
"nvd_published_at": "2012-08-26T20:55:00Z"
}
}
advisories/github-reviewed/2022/05/GHSA-cxm4-7qcw-267r/GHSA-cxm4-7qcw-267r.json
+100
View File
@@ -0,0 +1,100 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cxm4-7qcw-267r",
"modified": "2024-05-01T11:21:22Z",
"published": "2022-05-17T01:59:05Z",
"aliases": [
"CVE-2015-6941"
],
"summary": "salt password information leaked in debug logs",
"details": "win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "salt"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2015.5"
},
{
"fixed": "2015.5.6"
}
]
}
]
},
{
"package": {
"ecosystem": "PyPI",
"name": "salt"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2015.8"
},
{
"fixed": "2015.8.1"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6941"
},
{
"type": "WEB",
"url": "https://github.com/saltstack/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710"
},
{
"type": "WEB",
"url": "https://github.com/saltstack/salt/commit/fdd35374562658f4a20767a3703fab93d92f9ca9"
},
{
"type": "WEB",
"url": "https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1273066"
},
{
"type": "WEB",
"url": "https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html"
},
{
"type": "WEB",
"url": "https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html"
},
{
"type": "PACKAGE",
"url": "https://github.com/saltstack/salt"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2024-05-01T11:21:22Z",
"nvd_published_at": "2017-08-09T16:29:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-cxm4-7qcw-267r/GHSA-cxm4-7qcw-267r.json
-50
View File
@@ -1,50 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cxm4-7qcw-267r",
"modified": "2022-05-17T01:59:05Z",
"published": "2022-05-17T01:59:05Z",
"aliases": [
"CVE-2015-6941"
],
"details": "win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6941"
},
{
"type": "WEB",
"url": "https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1273066"
},
{
"type": "WEB",
"url": "https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html"
},
{
"type": "WEB",
"url": "https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2017-08-09T16:29:00Z"
}
}