Advisory Database Sync

advisories/unreviewed/2023/06/GHSA-5p66-crx7-h9m4/GHSA-5p66-crx7-h9m4.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-203"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2023/06/GHSA-5vjx-mmc5-585p/GHSA-5vjx-mmc5-585p.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-770"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2023/06/GHSA-9jj4-588g-mm69/GHSA-9jj4-588g-mm69.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-640"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2023/06/GHSA-g8gx-vmx9-6pjp/GHSA-g8gx-vmx9-6pjp.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-770"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2023/06/GHSA-r2rm-q57r-42w3/GHSA-r2rm-q57r-42w3.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-770"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2023/06/GHSA-wg65-w3r9-phxw/GHSA-wg65-w3r9-phxw.json

@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2024/02/GHSA-3qwx-q6x9-637h/GHSA-3qwx-q6x9-637h.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3qwx-q6x9-637h",
-  "modified": "2024-02-18T09:30:47Z",
+  "modified": "2024-12-06T21:30:34Z",
   "published": "2024-02-18T09:30:47Z",
   "aliases": [
     "CVE-2023-52378"
   ],
   "details": "Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-18T07:15:08Z"

advisories/unreviewed/2024/02/GHSA-45ch-2h92-cc35/GHSA-45ch-2h92-cc35.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-45ch-2h92-cc35",
-  "modified": "2024-02-18T06:30:32Z",
+  "modified": "2024-12-06T21:30:34Z",
   "published": "2024-02-18T06:30:32Z",
   "aliases": [
     "CVE-2023-52375"
   ],
   "details": "Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-18T06:15:07Z"

advisories/unreviewed/2024/02/GHSA-68vm-vpf9-fgr6/GHSA-68vm-vpf9-fgr6.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-68vm-vpf9-fgr6",
-  "modified": "2024-02-28T09:30:38Z",
+  "modified": "2024-12-06T21:30:35Z",
   "published": "2024-02-28T09:30:38Z",
   "aliases": [
     "CVE-2021-47028"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7915: fix txrate reporting\n\nProperly check rate_info to fix unexpected reporting.\n\n[ 1215.161863] Call trace:\n[ 1215.164307]  cfg80211_calculate_bitrate+0x124/0x200 [cfg80211]\n[ 1215.170139]  ieee80211s_update_metric+0x80/0xc0 [mac80211]\n[ 1215.175624]  ieee80211_tx_status_ext+0x508/0x838 [mac80211]\n[ 1215.181190]  mt7915_mcu_get_rx_rate+0x28c/0x8d0 [mt7915e]\n[ 1215.186580]  mt7915_mac_tx_free+0x324/0x7c0 [mt7915e]\n[ 1215.191623]  mt7915_queue_rx_skb+0xa8/0xd0 [mt7915e]\n[ 1215.196582]  mt76_dma_cleanup+0x7b0/0x11d0 [mt76]\n[ 1215.201276]  __napi_poll+0x38/0xf8\n[ 1215.204668]  napi_workfn+0x40/0x80\n[ 1215.208062]  process_one_work+0x1fc/0x390\n[ 1215.212062]  worker_thread+0x48/0x4d0\n[ 1215.215715]  kthread+0x120/0x128\n[ 1215.218935]  ret_from_fork+0x10/0x1c",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -29,7 +34,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-28T09:15:39Z"

advisories/unreviewed/2024/02/GHSA-7h2p-gcjg-4fw8/GHSA-7h2p-gcjg-4fw8.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7h2p-gcjg-4fw8",
-  "modified": "2024-02-28T09:30:38Z",
+  "modified": "2024-12-06T21:30:35Z",
   "published": "2024-02-28T09:30:38Z",
   "aliases": [
     "CVE-2021-47045"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb()\n\nIt is possible to call lpfc_issue_els_plogi() passing a did for which no\nmatching ndlp is found. A call is then made to lpfc_prep_els_iocb() with a\nnull pointer to a lpfc_nodelist structure resulting in a null pointer\ndereference.\n\nFix by returning an error status if no valid ndlp is found. Fix up comments\nregarding ndlp reference counting.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-28T09:15:40Z"

advisories/unreviewed/2024/02/GHSA-c22v-83jg-hp9r/GHSA-c22v-83jg-hp9r.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c22v-83jg-hp9r",
-  "modified": "2024-02-18T06:30:31Z",
+  "modified": "2024-12-06T21:30:34Z",
   "published": "2024-02-18T06:30:31Z",
   "aliases": [
     "CVE-2023-52373"
   ],
   "details": "Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-281"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-18T04:15:08Z"

advisories/unreviewed/2024/02/GHSA-jrrc-pqj2-c99f/GHSA-jrrc-pqj2-c99f.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jrrc-pqj2-c99f",
-  "modified": "2024-02-26T18:30:31Z",
+  "modified": "2024-12-06T21:30:34Z",
   "published": "2024-02-26T18:30:31Z",
   "aliases": [
     "CVE-2024-25763"
   ],
   "details": "openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-26T16:27:59Z"

advisories/unreviewed/2024/02/GHSA-jxp6-f9wg-m536/GHSA-jxp6-f9wg-m536.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jxp6-f9wg-m536",
-  "modified": "2024-02-18T03:30:24Z",
+  "modified": "2024-12-06T21:30:34Z",
   "published": "2024-02-18T03:30:24Z",
   "aliases": [
     "CVE-2023-52361"
   ],
   "details": "The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-18T03:15:08Z"

advisories/unreviewed/2024/02/GHSA-qp5h-mm28-4jq3/GHSA-qp5h-mm28-4jq3.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qp5h-mm28-4jq3",
-  "modified": "2024-05-14T15:32:40Z",
+  "modified": "2024-12-06T21:30:35Z",
   "published": "2024-02-29T03:33:18Z",
   "aliases": [
     "CVE-2024-26458"
   ],
   "details": "Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-29T01:44:18Z"

advisories/unreviewed/2024/02/GHSA-rmgv-92vx-xfh9/GHSA-rmgv-92vx-xfh9.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rmgv-92vx-xfh9",
-  "modified": "2024-02-18T09:30:47Z",
+  "modified": "2024-12-06T21:30:34Z",
   "published": "2024-02-18T09:30:47Z",
   "aliases": [
     "CVE-2022-48621"
   ],
   "details": "Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -27,7 +32,7 @@
     "cwe_ids": [
       "CWE-306"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-18T07:15:07Z"

advisories/unreviewed/2024/02/GHSA-rxx8-hw28-8whc/GHSA-rxx8-hw28-8whc.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rxx8-hw28-8whc",
-  "modified": "2024-02-28T09:30:38Z",
+  "modified": "2024-12-06T21:30:35Z",
   "published": "2024-02-28T09:30:38Z",
   "aliases": [
     "CVE-2021-47030"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7615: fix memory leak in mt7615_coredump_work\n\nSimilar to the issue fixed in mt7921_coredump_work, fix a possible memory\nleak in mt7615_coredump_work routine.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-28T09:15:39Z"

advisories/unreviewed/2024/02/GHSA-v368-7gcx-f4wj/GHSA-v368-7gcx-f4wj.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v368-7gcx-f4wj",
-  "modified": "2024-02-28T09:30:38Z",
+  "modified": "2024-12-06T21:30:35Z",
   "published": "2024-02-28T09:30:38Z",
   "aliases": [
     "CVE-2021-47042"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Free local data after use\n\nFixes the following memory leak in dc_link_construct():\n\nunreferenced object 0xffffa03e81471400 (size 1024):\ncomm \"amd_module_load\", pid 2486, jiffies 4294946026 (age 10.544s)\nhex dump (first 32 bytes):\n00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\nbacktrace:\n[<000000000bdf5c4a>] kmem_cache_alloc_trace+0x30a/0x4a0\n[<00000000e7c59f0e>] link_create+0xce/0xac0 [amdgpu]\n[<000000002fb6c072>] dc_create+0x370/0x720 [amdgpu]\n[<000000000094d1f3>] amdgpu_dm_init+0x18e/0x17a0 [amdgpu]\n[<00000000bec048fd>] dm_hw_init+0x12/0x20 [amdgpu]\n[<00000000a2bb7cf6>] amdgpu_device_init+0x1463/0x1e60 [amdgpu]\n[<0000000032d3bb13>] amdgpu_driver_load_kms+0x5b/0x330 [amdgpu]\n[<00000000a27834f9>] amdgpu_pci_probe+0x192/0x280 [amdgpu]\n[<00000000fec7d291>] local_pci_probe+0x47/0xa0\n[<0000000055dbbfa7>] pci_device_probe+0xe3/0x180\n[<00000000815da970>] really_probe+0x1c4/0x4e0\n[<00000000b4b6974b>] driver_probe_device+0x62/0x150\n[<000000000f9ecc61>] device_driver_attach+0x58/0x60\n[<000000000f65c843>] __driver_attach+0xd6/0x150\n[<000000002f5e3683>] bus_for_each_dev+0x6a/0xc0\n[<00000000a1cfc897>] driver_attach+0x1e/0x20",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-28T09:15:40Z"