diff --git a/advisories/unreviewed/2022/05/GHSA-w5vh-2923-gp5c/GHSA-w5vh-2923-gp5c.json b/advisories/unreviewed/2022/05/GHSA-w5vh-2923-gp5c/GHSA-w5vh-2923-gp5c.json
index a895ba1617e..1ce90199bec 100644
--- a/advisories/unreviewed/2022/05/GHSA-w5vh-2923-gp5c/GHSA-w5vh-2923-gp5c.json
+++ b/advisories/unreviewed/2022/05/GHSA-w5vh-2923-gp5c/GHSA-w5vh-2923-gp5c.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w5vh-2923-gp5c",
- "modified": "2024-07-09T18:30:42Z",
+ "modified": "2024-09-18T18:30:48Z",
"published": "2022-05-24T17:40:22Z",
"aliases": [
"CVE-2021-3156"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3156"
},
+ {
+ "type": "WEB",
+ "url": "https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156"
+ },
{
"type": "WEB",
"url": "https://www.synology.com/security/advisory/Synology_SA_21_02"
diff --git a/advisories/unreviewed/2023/10/GHSA-76fp-52wr-gx66/GHSA-76fp-52wr-gx66.json b/advisories/unreviewed/2023/10/GHSA-76fp-52wr-gx66/GHSA-76fp-52wr-gx66.json
index 881d40293bd..afa78fb5380 100644
--- a/advisories/unreviewed/2023/10/GHSA-76fp-52wr-gx66/GHSA-76fp-52wr-gx66.json
+++ b/advisories/unreviewed/2023/10/GHSA-76fp-52wr-gx66/GHSA-76fp-52wr-gx66.json
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2023/10/GHSA-967w-wxwg-hhh6/GHSA-967w-wxwg-hhh6.json b/advisories/unreviewed/2023/10/GHSA-967w-wxwg-hhh6/GHSA-967w-wxwg-hhh6.json
index cef30ae81bf..2b4577a1c88 100644
--- a/advisories/unreviewed/2023/10/GHSA-967w-wxwg-hhh6/GHSA-967w-wxwg-hhh6.json
+++ b/advisories/unreviewed/2023/10/GHSA-967w-wxwg-hhh6/GHSA-967w-wxwg-hhh6.json
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-200"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2024/05/GHSA-j867-9253-8mrv/GHSA-j867-9253-8mrv.json b/advisories/unreviewed/2024/05/GHSA-j867-9253-8mrv/GHSA-j867-9253-8mrv.json
index 5b380ea4c43..958ef04e798 100644
--- a/advisories/unreviewed/2024/05/GHSA-j867-9253-8mrv/GHSA-j867-9253-8mrv.json
+++ b/advisories/unreviewed/2024/05/GHSA-j867-9253-8mrv/GHSA-j867-9253-8mrv.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j867-9253-8mrv",
- "modified": "2024-05-19T12:30:39Z",
+ "modified": "2024-09-18T18:30:48Z",
"published": "2024-05-19T12:30:39Z",
"aliases": [
"CVE-2024-35943"
@@ -26,6 +26,10 @@
"type": "WEB",
"url": "https://git.kernel.org/stable/c/5d7f58ee08434a33340f75ac7ac5071eea9673b3"
},
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/bc08f5ab11b1881b85371f0bd9c9a3d27f65cca8"
+ },
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/ce666cecc09c0f92d5f86d89d8068ecfcf723a7e"
diff --git a/advisories/unreviewed/2024/06/GHSA-2pg7-r8hw-8m7v/GHSA-2pg7-r8hw-8m7v.json b/advisories/unreviewed/2024/06/GHSA-2pg7-r8hw-8m7v/GHSA-2pg7-r8hw-8m7v.json
index 967ee54b797..fd06502652e 100644
--- a/advisories/unreviewed/2024/06/GHSA-2pg7-r8hw-8m7v/GHSA-2pg7-r8hw-8m7v.json
+++ b/advisories/unreviewed/2024/06/GHSA-2pg7-r8hw-8m7v/GHSA-2pg7-r8hw-8m7v.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2pg7-r8hw-8m7v",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2022-48726"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/ucma: Protect mc during concurrent multicast leaves\n\nPartially revert the commit mentioned in the Fixes line to make sure that\nallocation and erasing multicast struct are locked.\n\n BUG: KASAN: use-after-free in ucma_cleanup_multicast drivers/infiniband/core/ucma.c:491 [inline]\n BUG: KASAN: use-after-free in ucma_destroy_private_ctx+0x914/0xb70 drivers/infiniband/core/ucma.c:579\n Read of size 8 at addr ffff88801bb74b00 by task syz-executor.1/25529\n CPU: 0 PID: 25529 Comm: syz-executor.1 Not tainted 5.16.0-rc7-syzkaller #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\n Call Trace:\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\n print_address_description.constprop.0.cold+0x8d/0x320 mm/kasan/report.c:247\n __kasan_report mm/kasan/report.c:433 [inline]\n kasan_report.cold+0x83/0xdf mm/kasan/report.c:450\n ucma_cleanup_multicast drivers/infiniband/core/ucma.c:491 [inline]\n ucma_destroy_private_ctx+0x914/0xb70 drivers/infiniband/core/ucma.c:579\n ucma_destroy_id+0x1e6/0x280 drivers/infiniband/core/ucma.c:614\n ucma_write+0x25c/0x350 drivers/infiniband/core/ucma.c:1732\n vfs_write+0x28e/0xae0 fs/read_write.c:588\n ksys_write+0x1ee/0x250 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nCurrently the xarray search can touch a concurrently freeing mc as the\nxa_for_each() is not surrounded by any lock. Rather than hold the lock for\na full scan hold it only for the effected items, which is usually an empty\nlist.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-416"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:11Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-33xv-g39w-2g66/GHSA-33xv-g39w-2g66.json b/advisories/unreviewed/2024/06/GHSA-33xv-g39w-2g66/GHSA-33xv-g39w-2g66.json
index 68de60f1368..4e756a4970a 100644
--- a/advisories/unreviewed/2024/06/GHSA-33xv-g39w-2g66/GHSA-33xv-g39w-2g66.json
+++ b/advisories/unreviewed/2024/06/GHSA-33xv-g39w-2g66/GHSA-33xv-g39w-2g66.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-33xv-g39w-2g66",
- "modified": "2024-06-20T12:31:22Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:22Z",
"aliases": [
"CVE-2022-48753"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix memory leak in disk_register_independent_access_ranges\n\nkobject_init_and_add() takes reference even when it fails.\nAccording to the doc of kobject_init_and_add()\n\n If this function returns an error, kobject_put() must be called to\n properly clean up the memory associated with the object.\n\nFix this issue by adding kobject_put().\nCallback function blk_ia_ranges_sysfs_release() in kobject_put()\ncan handle the pointer \"iars\" properly.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:13Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-37rf-gf26-33r7/GHSA-37rf-gf26-33r7.json b/advisories/unreviewed/2024/06/GHSA-37rf-gf26-33r7/GHSA-37rf-gf26-33r7.json
index 8dd629d026d..29209ce7241 100644
--- a/advisories/unreviewed/2024/06/GHSA-37rf-gf26-33r7/GHSA-37rf-gf26-33r7.json
+++ b/advisories/unreviewed/2024/06/GHSA-37rf-gf26-33r7/GHSA-37rf-gf26-33r7.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-37rf-gf26-33r7",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2022-48718"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: mxsfb: Fix NULL pointer dereference\n\nmxsfb should not ever dereference the NULL pointer which\ndrm_atomic_get_new_bridge_state is allowed to return.\nAssume a fixed format instead.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T11:15:55Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-38c9-5x95-x8fq/GHSA-38c9-5x95-x8fq.json b/advisories/unreviewed/2024/06/GHSA-38c9-5x95-x8fq/GHSA-38c9-5x95-x8fq.json
index 54ea69a179c..6b2151da3b8 100644
--- a/advisories/unreviewed/2024/06/GHSA-38c9-5x95-x8fq/GHSA-38c9-5x95-x8fq.json
+++ b/advisories/unreviewed/2024/06/GHSA-38c9-5x95-x8fq/GHSA-38c9-5x95-x8fq.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38c9-5x95-x8fq",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2022-48723"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: uniphier: fix reference count leak in uniphier_spi_probe()\n\nThe issue happens in several error paths in uniphier_spi_probe().\nWhen either dma_get_slave_caps() or devm_spi_register_master() returns\nan error code, the function forgets to decrease the refcount of both\n`dma_rx` and `dma_tx` objects, which may lead to refcount leaks.\n\nFix it by decrementing the reference count of specific objects in\nthose error paths.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -39,7 +42,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T11:15:55Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-5jhp-6hhp-5q5g/GHSA-5jhp-6hhp-5q5g.json b/advisories/unreviewed/2024/06/GHSA-5jhp-6hhp-5q5g/GHSA-5jhp-6hhp-5q5g.json
index 96bc86ba6de..2ba0b9f11bf 100644
--- a/advisories/unreviewed/2024/06/GHSA-5jhp-6hhp-5q5g/GHSA-5jhp-6hhp-5q5g.json
+++ b/advisories/unreviewed/2024/06/GHSA-5jhp-6hhp-5q5g/GHSA-5jhp-6hhp-5q5g.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5jhp-6hhp-5q5g",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2022-48724"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()\n\nAfter commit e3beca48a45b (\"irqdomain/treewide: Keep firmware node\nunconditionally allocated\"). For tear down scenario, fn is only freed\nafter fail to allocate ir_domain, though it also should be freed in case\ndmar_enable_qi returns error.\n\nBesides free fn, irq_domain and ir_msi_domain need to be removed as well\nif intel_setup_irq_remapping fails to enable queued invalidation.\n\nImprove the rewinding path by add out_free_ir_domain and out_free_fwnode\nlables per Baolu's suggestion.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -49,9 +52,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:10Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-6j4r-jvg8-v6gc/GHSA-6j4r-jvg8-v6gc.json b/advisories/unreviewed/2024/06/GHSA-6j4r-jvg8-v6gc/GHSA-6j4r-jvg8-v6gc.json
index 98ce4793b24..3ae5b6a14e6 100644
--- a/advisories/unreviewed/2024/06/GHSA-6j4r-jvg8-v6gc/GHSA-6j4r-jvg8-v6gc.json
+++ b/advisories/unreviewed/2024/06/GHSA-6j4r-jvg8-v6gc/GHSA-6j4r-jvg8-v6gc.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6j4r-jvg8-v6gc",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2022-48719"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work\n\nsyzkaller was able to trigger a deadlock for NTF_MANAGED entries [0]:\n\n kworker/0:16/14617 is trying to acquire lock:\n ffffffff8d4dd370 (&tbl->lock){++-.}-{2:2}, at: ___neigh_create+0x9e1/0x2990 net/core/neighbour.c:652\n [...]\n but task is already holding lock:\n ffffffff8d4dd370 (&tbl->lock){++-.}-{2:2}, at: neigh_managed_work+0x35/0x250 net/core/neighbour.c:1572\n\nThe neighbor entry turned to NUD_FAILED state, where __neigh_event_send()\ntriggered an immediate probe as per commit cd28ca0a3dd1 (\"neigh: reduce\narp latency\") via neigh_probe() given table lock was held.\n\nOne option to fix this situation is to defer the neigh_probe() back to\nthe neigh_timer_handler() similarly as pre cd28ca0a3dd1. For the case\nof NTF_MANAGED, this deferral is acceptable given this only happens on\nactual failure state and regular / expected state is NUD_VALID with the\nentry already present.\n\nThe fix adds a parameter to __neigh_event_send() in order to communicate\nwhether immediate probe is allowed or disallowed. Existing call-sites\nof neigh_event_send() default as-is to immediate probe. However, the\nneigh_managed_work() disables it via use of neigh_event_send_probe().\n\n[0] \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\n print_deadlock_bug kernel/locking/lockdep.c:2956 [inline]\n check_deadlock kernel/locking/lockdep.c:2999 [inline]\n validate_chain kernel/locking/lockdep.c:3788 [inline]\n __lock_acquire.cold+0x149/0x3ab kernel/locking/lockdep.c:5027\n lock_acquire kernel/locking/lockdep.c:5639 [inline]\n lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5604\n __raw_write_lock_bh include/linux/rwlock_api_smp.h:202 [inline]\n _raw_write_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:334\n ___neigh_create+0x9e1/0x2990 net/core/neighbour.c:652\n ip6_finish_output2+0x1070/0x14f0 net/ipv6/ip6_output.c:123\n __ip6_finish_output net/ipv6/ip6_output.c:191 [inline]\n __ip6_finish_output+0x61e/0xe90 net/ipv6/ip6_output.c:170\n ip6_finish_output+0x32/0x200 net/ipv6/ip6_output.c:201\n NF_HOOK_COND include/linux/netfilter.h:296 [inline]\n ip6_output+0x1e4/0x530 net/ipv6/ip6_output.c:224\n dst_output include/net/dst.h:451 [inline]\n NF_HOOK include/linux/netfilter.h:307 [inline]\n ndisc_send_skb+0xa99/0x17f0 net/ipv6/ndisc.c:508\n ndisc_send_ns+0x3a9/0x840 net/ipv6/ndisc.c:650\n ndisc_solicit+0x2cd/0x4f0 net/ipv6/ndisc.c:742\n neigh_probe+0xc2/0x110 net/core/neighbour.c:1040\n __neigh_event_send+0x37d/0x1570 net/core/neighbour.c:1201\n neigh_event_send include/net/neighbour.h:470 [inline]\n neigh_managed_work+0x162/0x250 net/core/neighbour.c:1574\n process_one_work+0x9ac/0x1650 kernel/workqueue.c:2307\n worker_thread+0x657/0x1110 kernel/workqueue.c:2454\n kthread+0x2e9/0x3a0 kernel/kthread.c:377\n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295\n ",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-667"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T11:15:55Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-c4jc-f237-c7h5/GHSA-c4jc-f237-c7h5.json b/advisories/unreviewed/2024/06/GHSA-c4jc-f237-c7h5/GHSA-c4jc-f237-c7h5.json
index 6bb2589c82f..6e72cd7db01 100644
--- a/advisories/unreviewed/2024/06/GHSA-c4jc-f237-c7h5/GHSA-c4jc-f237-c7h5.json
+++ b/advisories/unreviewed/2024/06/GHSA-c4jc-f237-c7h5/GHSA-c4jc-f237-c7h5.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c4jc-f237-c7h5",
- "modified": "2024-06-20T12:31:22Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:22Z",
"aliases": [
"CVE-2022-48756"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dsi: invalid parameter check in msm_dsi_phy_enable\n\nThe function performs a check on the \"phy\" input parameter, however, it\nis used before the check.\n\nInitialize the \"dev\" variable after the sanity check to avoid a possible\nNULL pointer dereference.\n\nAddresses-Coverity-ID: 1493860 (\"Null pointer dereference\")",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -49,9 +52,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:13Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-cw86-cw6h-wc44/GHSA-cw86-cw6h-wc44.json b/advisories/unreviewed/2024/06/GHSA-cw86-cw6h-wc44/GHSA-cw86-cw6h-wc44.json
index 8126e56bf1e..7517b84510a 100644
--- a/advisories/unreviewed/2024/06/GHSA-cw86-cw6h-wc44/GHSA-cw86-cw6h-wc44.json
+++ b/advisories/unreviewed/2024/06/GHSA-cw86-cw6h-wc44/GHSA-cw86-cw6h-wc44.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cw86-cw6h-wc44",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2021-47619"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix queues reservation for XDP\n\nWhen XDP was configured on a system with large number of CPUs\nand X722 NIC there was a call trace with NULL pointer dereference.\n\ni40e 0000:87:00.0: failed to get tracking for 256 queues for VSI 0 err -12\ni40e 0000:87:00.0: setup of MAIN VSI failed\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nRIP: 0010:i40e_xdp+0xea/0x1b0 [i40e]\nCall Trace:\n? i40e_reconfig_rss_queues+0x130/0x130 [i40e]\ndev_xdp_install+0x61/0xe0\ndev_xdp_attach+0x18a/0x4c0\ndev_change_xdp_fd+0x1e6/0x220\ndo_setlink+0x616/0x1030\n? ahci_port_stop+0x80/0x80\n? ata_qc_issue+0x107/0x1e0\n? lock_timer_base+0x61/0x80\n? __mod_timer+0x202/0x380\nrtnl_setlink+0xe5/0x170\n? bpf_lsm_binder_transaction+0x10/0x10\n? security_capable+0x36/0x50\nrtnetlink_rcv_msg+0x121/0x350\n? rtnl_calcit.isra.0+0x100/0x100\nnetlink_rcv_skb+0x50/0xf0\nnetlink_unicast+0x1d3/0x2a0\nnetlink_sendmsg+0x22a/0x440\nsock_sendmsg+0x5e/0x60\n__sys_sendto+0xf0/0x160\n? __sys_getsockname+0x7e/0xc0\n? _copy_from_user+0x3c/0x80\n? __sys_setsockopt+0xc8/0x1a0\n__x64_sys_sendto+0x20/0x30\ndo_syscall_64+0x33/0x40\nentry_SYSCALL_64_after_hwframe+0x44/0xae\nRIP: 0033:0x7f83fa7a39e0\n\nThis was caused by PF queue pile fragmentation due to\nflow director VSI queue being placed right after main VSI.\nBecause of this main VSI was not able to resize its\nqueue allocation for XDP resulting in no queues allocated\nfor main VSI when XDP was turned on.\n\nFix this by always allocating last queue in PF queue pile\nfor a flow director VSI.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T11:15:54Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-g2r9-fvrv-f652/GHSA-g2r9-fvrv-f652.json b/advisories/unreviewed/2024/06/GHSA-g2r9-fvrv-f652/GHSA-g2r9-fvrv-f652.json
index 975a5c0b03b..a867bfc50d4 100644
--- a/advisories/unreviewed/2024/06/GHSA-g2r9-fvrv-f652/GHSA-g2r9-fvrv-f652.json
+++ b/advisories/unreviewed/2024/06/GHSA-g2r9-fvrv-f652/GHSA-g2r9-fvrv-f652.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g2r9-fvrv-f652",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2021-47620"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: refactor malicious adv data check\n\nCheck for out-of-bound read was being performed at the end of while\nnum_reports loop, and would fill journal with false positives. Added\ncheck to beginning of loop processing so that it doesn't get checked\nafter ptr has been advanced.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
+ }
],
"affected": [
@@ -57,9 +60,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-125"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T11:15:54Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-gcrq-r544-wxfh/GHSA-gcrq-r544-wxfh.json b/advisories/unreviewed/2024/06/GHSA-gcrq-r544-wxfh/GHSA-gcrq-r544-wxfh.json
index 81ce1ea4a4a..4d7036a683f 100644
--- a/advisories/unreviewed/2024/06/GHSA-gcrq-r544-wxfh/GHSA-gcrq-r544-wxfh.json
+++ b/advisories/unreviewed/2024/06/GHSA-gcrq-r544-wxfh/GHSA-gcrq-r544-wxfh.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gcrq-r544-wxfh",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2021-4439"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nisdn: cpai: check ctr->cnr to avoid array index out of bound\n\nThe cmtp_add_connection() would add a cmtp session to a controller\nand run a kernel thread to process cmtp.\n\n\t__module_get(THIS_MODULE);\n\tsession->task = kthread_run(cmtp_session, session, \"kcmtpd_ctr_%d\",\n\t\t\t\t\t\t\t\tsession->num);\n\nDuring this process, the kernel thread would call detach_capi_ctr()\nto detach a register controller. if the controller\nwas not attached yet, detach_capi_ctr() would\ntrigger an array-index-out-bounds bug.\n\n[ 46.866069][ T6479] UBSAN: array-index-out-of-bounds in\ndrivers/isdn/capi/kcapi.c:483:21\n[ 46.867196][ T6479] index -1 is out of range for type 'capi_ctr *[32]'\n[ 46.867982][ T6479] CPU: 1 PID: 6479 Comm: kcmtpd_ctr_0 Not tainted\n5.15.0-rc2+ #8\n[ 46.869002][ T6479] Hardware name: QEMU Standard PC (i440FX + PIIX,\n1996), BIOS 1.14.0-2 04/01/2014\n[ 46.870107][ T6479] Call Trace:\n[ 46.870473][ T6479] dump_stack_lvl+0x57/0x7d\n[ 46.870974][ T6479] ubsan_epilogue+0x5/0x40\n[ 46.871458][ T6479] __ubsan_handle_out_of_bounds.cold+0x43/0x48\n[ 46.872135][ T6479] detach_capi_ctr+0x64/0xc0\n[ 46.872639][ T6479] cmtp_session+0x5c8/0x5d0\n[ 46.873131][ T6479] ? __init_waitqueue_head+0x60/0x60\n[ 46.873712][ T6479] ? cmtp_add_msgpart+0x120/0x120\n[ 46.874256][ T6479] kthread+0x147/0x170\n[ 46.874709][ T6479] ? set_kthread_struct+0x40/0x40\n[ 46.875248][ T6479] ret_from_fork+0x1f/0x30\n[ 46.875773][ T6479]",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -53,9 +56,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-129"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:10Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-hmp7-pqw6-66rw/GHSA-hmp7-pqw6-66rw.json b/advisories/unreviewed/2024/06/GHSA-hmp7-pqw6-66rw/GHSA-hmp7-pqw6-66rw.json
index ca6122b1596..e34cc598bbc 100644
--- a/advisories/unreviewed/2024/06/GHSA-hmp7-pqw6-66rw/GHSA-hmp7-pqw6-66rw.json
+++ b/advisories/unreviewed/2024/06/GHSA-hmp7-pqw6-66rw/GHSA-hmp7-pqw6-66rw.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hmp7-pqw6-66rw",
- "modified": "2024-06-20T15:31:18Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:22Z",
"aliases": [
"CVE-2022-48750"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (nct6775) Fix crash in clear_caseopen\n\nPaweł Marciniak reports the following crash, observed when clearing\nthe chassis intrusion alarm.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000028\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 3 PID: 4815 Comm: bash Tainted: G S 5.16.2-200.fc35.x86_64 #1\nHardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./Z97 Extreme4, BIOS P2.60A 05/03/2018\nRIP: 0010:clear_caseopen+0x5a/0x120 [nct6775]\nCode: 68 70 e8 e9 32 b1 e3 85 c0 0f 85 d2 00 00 00 48 83 7c 24 ...\nRSP: 0018:ffffabcb02803dd8 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000\nRDX: ffff8e8808192880 RSI: 0000000000000000 RDI: ffff8e87c7509a68\nRBP: 0000000000000000 R08: 0000000000000001 R09: 000000000000000a\nR10: 000000000000000a R11: f000000000000000 R12: 000000000000001f\nR13: ffff8e87c7509828 R14: ffff8e87c7509a68 R15: ffff8e88494527a0\nFS: 00007f4db9151740(0000) GS:ffff8e8ebfec0000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000028 CR3: 0000000166b66001 CR4: 00000000001706e0\nCall Trace:\n \n kernfs_fop_write_iter+0x11c/0x1b0\n new_sync_write+0x10b/0x180\n vfs_write+0x209/0x2a0\n ksys_write+0x4f/0xc0\n do_syscall_64+0x3b/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nThe problem is that the device passed to clear_caseopen() is the hwmon\ndevice, not the platform device, and the platform data is not set in the\nhwmon device. Store the pointer to sio_data in struct nct6775_data and\nget if from there if needed.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:13Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-mfmr-68wm-65f9/GHSA-mfmr-68wm-65f9.json b/advisories/unreviewed/2024/06/GHSA-mfmr-68wm-65f9/GHSA-mfmr-68wm-65f9.json
index 939b4d4772d..3759ec5e2e6 100644
--- a/advisories/unreviewed/2024/06/GHSA-mfmr-68wm-65f9/GHSA-mfmr-68wm-65f9.json
+++ b/advisories/unreviewed/2024/06/GHSA-mfmr-68wm-65f9/GHSA-mfmr-68wm-65f9.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mfmr-68wm-65f9",
- "modified": "2024-06-20T12:31:21Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:21Z",
"aliases": [
"CVE-2022-48728"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Fix AIP early init panic\n\nAn early failure in hfi1_ipoib_setup_rn() can lead to the following panic:\n\n BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0\n PGD 0 P4D 0\n Oops: 0002 [#1] SMP NOPTI\n Workqueue: events work_for_cpu_fn\n RIP: 0010:try_to_grab_pending+0x2b/0x140\n Code: 1f 44 00 00 41 55 41 54 55 48 89 d5 53 48 89 fb 9c 58 0f 1f 44 00 00 48 89 c2 fa 66 0f 1f 44 00 00 48 89 55 00 40 84 f6 75 77 48 0f ba 2b 00 72 09 31 c0 5b 5d 41 5c 41 5d c3 48 89 df e8 6c\n RSP: 0018:ffffb6b3cf7cfa48 EFLAGS: 00010046\n RAX: 0000000000000246 RBX: 00000000000001b0 RCX: 0000000000000000\n RDX: 0000000000000246 RSI: 0000000000000000 RDI: 00000000000001b0\n RBP: ffffb6b3cf7cfa70 R08: 0000000000000f09 R09: 0000000000000001\n R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000\n R13: ffffb6b3cf7cfa90 R14: ffffffff9b2fbfc0 R15: ffff8a4fdf244690\n FS: 0000000000000000(0000) GS:ffff8a527f400000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00000000000001b0 CR3: 00000017e2410003 CR4: 00000000007706f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n PKRU: 55555554\n Call Trace:\n __cancel_work_timer+0x42/0x190\n ? dev_printk_emit+0x4e/0x70\n iowait_cancel_work+0x15/0x30 [hfi1]\n hfi1_ipoib_txreq_deinit+0x5a/0x220 [hfi1]\n ? dev_err+0x6c/0x90\n hfi1_ipoib_netdev_dtor+0x15/0x30 [hfi1]\n hfi1_ipoib_setup_rn+0x10e/0x150 [hfi1]\n rdma_init_netdev+0x5a/0x80 [ib_core]\n ? hfi1_ipoib_free_rdma_netdev+0x20/0x20 [hfi1]\n ipoib_intf_init+0x6c/0x350 [ib_ipoib]\n ipoib_intf_alloc+0x5c/0xc0 [ib_ipoib]\n ipoib_add_one+0xbe/0x300 [ib_ipoib]\n add_client_context+0x12c/0x1a0 [ib_core]\n enable_device_and_get+0xdc/0x1d0 [ib_core]\n ib_register_device+0x572/0x6b0 [ib_core]\n rvt_register_device+0x11b/0x220 [rdmavt]\n hfi1_register_ib_device+0x6b4/0x770 [hfi1]\n do_init_one.isra.20+0x3e3/0x680 [hfi1]\n local_pci_probe+0x41/0x90\n work_for_cpu_fn+0x16/0x20\n process_one_work+0x1a7/0x360\n ? create_worker+0x1a0/0x1a0\n worker_thread+0x1cf/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x116/0x130\n ? kthread_flush_work_fn+0x10/0x10\n ret_from_fork+0x1f/0x40\n\nThe panic happens in hfi1_ipoib_txreq_deinit() because there is a NULL\nderef when hfi1_ipoib_netdev_dtor() is called in this error case.\n\nhfi1_ipoib_txreq_init() and hfi1_ipoib_rxq_init() are self unwinding so\nfix by adjusting the error paths accordingly.\n\nOther changes:\n- hfi1_ipoib_free_rdma_netdev() is deleted including the free_netdev()\n since the netdev core code deletes calls free_netdev()\n- The switch to the accelerated entrances is moved to the success path.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:11Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-q3wh-8888-5hjg/GHSA-q3wh-8888-5hjg.json b/advisories/unreviewed/2024/06/GHSA-q3wh-8888-5hjg/GHSA-q3wh-8888-5hjg.json
index 5390eabcfe0..8698b22bebb 100644
--- a/advisories/unreviewed/2024/06/GHSA-q3wh-8888-5hjg/GHSA-q3wh-8888-5hjg.json
+++ b/advisories/unreviewed/2024/06/GHSA-q3wh-8888-5hjg/GHSA-q3wh-8888-5hjg.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q3wh-8888-5hjg",
- "modified": "2024-06-20T12:31:21Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:21Z",
"aliases": [
"CVE-2022-48729"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Fix panic with larger ipoib send_queue_size\n\nWhen the ipoib send_queue_size is increased from the default the following\npanic happens:\n\n RIP: 0010:hfi1_ipoib_drain_tx_ring+0x45/0xf0 [hfi1]\n Code: 31 e4 eb 0f 8b 85 c8 02 00 00 41 83 c4 01 44 39 e0 76 60 8b 8d cc 02 00 00 44 89 e3 be 01 00 00 00 d3 e3 48 03 9d c0 02 00 00 83 18 01 00 00 00 00 00 00 48 8b bb 30 01 00 00 e8 25 af a7 e0\n RSP: 0018:ffffc9000798f4a0 EFLAGS: 00010286\n RAX: 0000000000008000 RBX: ffffc9000aa0f000 RCX: 000000000000000f\n RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000\n RBP: ffff88810ff08000 R08: ffff88889476d900 R09: 0000000000000101\n R10: 0000000000000000 R11: ffffc90006590ff8 R12: 0000000000000200\n R13: ffffc9000798fba8 R14: 0000000000000000 R15: 0000000000000001\n FS: 00007fd0f79cc3c0(0000) GS:ffff88885fb00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: ffffc9000aa0f118 CR3: 0000000889c84001 CR4: 00000000001706e0\n Call Trace:\n \n hfi1_ipoib_napi_tx_disable+0x45/0x60 [hfi1]\n hfi1_ipoib_dev_stop+0x18/0x80 [hfi1]\n ipoib_ib_dev_stop+0x1d/0x40 [ib_ipoib]\n ipoib_stop+0x48/0xc0 [ib_ipoib]\n __dev_close_many+0x9e/0x110\n __dev_change_flags+0xd9/0x210\n dev_change_flags+0x21/0x60\n do_setlink+0x31c/0x10f0\n ? __nla_validate_parse+0x12d/0x1a0\n ? __nla_parse+0x21/0x30\n ? inet6_validate_link_af+0x5e/0xf0\n ? cpumask_next+0x1f/0x20\n ? __snmp6_fill_stats64.isra.53+0xbb/0x140\n ? __nla_validate_parse+0x47/0x1a0\n __rtnl_newlink+0x530/0x910\n ? pskb_expand_head+0x73/0x300\n ? __kmalloc_node_track_caller+0x109/0x280\n ? __nla_put+0xc/0x20\n ? cpumask_next_and+0x20/0x30\n ? update_sd_lb_stats.constprop.144+0xd3/0x820\n ? _raw_spin_unlock_irqrestore+0x25/0x37\n ? __wake_up_common_lock+0x87/0xc0\n ? kmem_cache_alloc_trace+0x3d/0x3d0\n rtnl_newlink+0x43/0x60\n\nThe issue happens when the shift that should have been a function of the\ntxq item size mistakenly used the ring size.\n\nFix by using the item size.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:11Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-r68c-p976-5jmg/GHSA-r68c-p976-5jmg.json b/advisories/unreviewed/2024/06/GHSA-r68c-p976-5jmg/GHSA-r68c-p976-5jmg.json
index cd318ac8bb6..0fe34bddfe2 100644
--- a/advisories/unreviewed/2024/06/GHSA-r68c-p976-5jmg/GHSA-r68c-p976-5jmg.json
+++ b/advisories/unreviewed/2024/06/GHSA-r68c-p976-5jmg/GHSA-r68c-p976-5jmg.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r68c-p976-5jmg",
- "modified": "2024-06-20T12:31:19Z",
+ "modified": "2024-09-18T18:30:48Z",
"published": "2024-06-20T12:31:19Z",
"aliases": [
"CVE-2021-47617"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: pciehp: Fix infinite loop in IRQ handler upon power fault\n\nThe Power Fault Detected bit in the Slot Status register differs from\nall other hotplug events in that it is sticky: It can only be cleared\nafter turning off slot power. Per PCIe r5.0, sec. 6.7.1.8:\n\n If a power controller detects a main power fault on the hot-plug slot,\n it must automatically set its internal main power fault latch [...].\n The main power fault latch is cleared when software turns off power to\n the hot-plug slot.\n\nThe stickiness used to cause interrupt storms and infinite loops which\nwere fixed in 2009 by commits 5651c48cfafe (\"PCI pciehp: fix power fault\ninterrupt storm problem\") and 99f0169c17f3 (\"PCI: pciehp: enable\nsoftware notification on empty slots\").\n\nUnfortunately in 2020 the infinite loop issue was inadvertently\nreintroduced by commit 8edf5332c393 (\"PCI: pciehp: Fix MSI interrupt\nrace\"): The hardirq handler pciehp_isr() clears the PFD bit until\npciehp's power_fault_detected flag is set. That happens in the IRQ\nthread pciehp_ist(), which never learns of the event because the hardirq\nhandler is stuck in an infinite loop. Fix by setting the\npower_fault_detected flag already in the hardirq handler.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-835"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T11:15:54Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-wfmj-q8m4-96gm/GHSA-wfmj-q8m4-96gm.json b/advisories/unreviewed/2024/06/GHSA-wfmj-q8m4-96gm/GHSA-wfmj-q8m4-96gm.json
index 8d0488aa0cb..d04d6a000f5 100644
--- a/advisories/unreviewed/2024/06/GHSA-wfmj-q8m4-96gm/GHSA-wfmj-q8m4-96gm.json
+++ b/advisories/unreviewed/2024/06/GHSA-wfmj-q8m4-96gm/GHSA-wfmj-q8m4-96gm.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wfmj-q8m4-96gm",
- "modified": "2024-06-20T12:31:22Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:22Z",
"aliases": [
"CVE-2022-48749"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc\n\nThe function performs a check on the \"ctx\" input parameter, however, it\nis used before the check.\n\nInitialize the \"base\" variable after the sanity check to avoid a\npossible NULL pointer dereference.\n\nAddresses-Coverity-ID: 1493866 (\"Null pointer dereference\")",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:13Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-xc27-896v-44wp/GHSA-xc27-896v-44wp.json b/advisories/unreviewed/2024/06/GHSA-xc27-896v-44wp/GHSA-xc27-896v-44wp.json
index f2cead7a95d..c7cf57728e0 100644
--- a/advisories/unreviewed/2024/06/GHSA-xc27-896v-44wp/GHSA-xc27-896v-44wp.json
+++ b/advisories/unreviewed/2024/06/GHSA-xc27-896v-44wp/GHSA-xc27-896v-44wp.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xc27-896v-44wp",
- "modified": "2024-06-20T12:31:20Z",
+ "modified": "2024-09-18T18:30:49Z",
"published": "2024-06-20T12:31:20Z",
"aliases": [
"CVE-2022-48725"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Fix refcounting leak in siw_create_qp()\n\nThe atomic_inc() needs to be paired with an atomic_dec() on the error\npath.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:10Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-3hfc-7w8c-chcm/GHSA-3hfc-7w8c-chcm.json b/advisories/unreviewed/2024/08/GHSA-3hfc-7w8c-chcm/GHSA-3hfc-7w8c-chcm.json
index ceaa01a2d3e..9955d74b54d 100644
--- a/advisories/unreviewed/2024/08/GHSA-3hfc-7w8c-chcm/GHSA-3hfc-7w8c-chcm.json
+++ b/advisories/unreviewed/2024/08/GHSA-3hfc-7w8c-chcm/GHSA-3hfc-7w8c-chcm.json
@@ -44,6 +44,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-79",
"CWE-80"
],
"severity": "MODERATE",
diff --git a/advisories/unreviewed/2024/08/GHSA-6q42-8j33-m2fc/GHSA-6q42-8j33-m2fc.json b/advisories/unreviewed/2024/08/GHSA-6q42-8j33-m2fc/GHSA-6q42-8j33-m2fc.json
index 4ae7292d801..930d38fc82c 100644
--- a/advisories/unreviewed/2024/08/GHSA-6q42-8j33-m2fc/GHSA-6q42-8j33-m2fc.json
+++ b/advisories/unreviewed/2024/08/GHSA-6q42-8j33-m2fc/GHSA-6q42-8j33-m2fc.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6q42-8j33-m2fc",
- "modified": "2024-08-26T21:30:34Z",
+ "modified": "2024-09-18T18:30:50Z",
"published": "2024-08-26T21:30:34Z",
"aliases": [
"CVE-2024-39657"
diff --git a/advisories/unreviewed/2024/08/GHSA-7pr7-8f3r-ffxj/GHSA-7pr7-8f3r-ffxj.json b/advisories/unreviewed/2024/08/GHSA-7pr7-8f3r-ffxj/GHSA-7pr7-8f3r-ffxj.json
index b66c3699068..59c68cc0e0c 100644
--- a/advisories/unreviewed/2024/08/GHSA-7pr7-8f3r-ffxj/GHSA-7pr7-8f3r-ffxj.json
+++ b/advisories/unreviewed/2024/08/GHSA-7pr7-8f3r-ffxj/GHSA-7pr7-8f3r-ffxj.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7pr7-8f3r-ffxj",
- "modified": "2024-08-26T21:30:34Z",
+ "modified": "2024-09-18T18:30:50Z",
"published": "2024-08-26T21:30:34Z",
"aliases": [
"CVE-2024-43230"
diff --git a/advisories/unreviewed/2024/09/GHSA-2jgc-rcc5-7q6j/GHSA-2jgc-rcc5-7q6j.json b/advisories/unreviewed/2024/09/GHSA-2jgc-rcc5-7q6j/GHSA-2jgc-rcc5-7q6j.json
new file mode 100644
index 00000000000..a2198eee143
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-2jgc-rcc5-7q6j/GHSA-2jgc-rcc5-7q6j.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-2jgc-rcc5-7q6j",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2024-46959"
+ ],
+ "details": "runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and audio stream.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46959"
+ },
+ {
+ "type": "WEB",
+ "url": "https://werewolves.world/blog/09072024"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T18:15:06Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-2jvw-9p97-g4qj/GHSA-2jvw-9p97-g4qj.json b/advisories/unreviewed/2024/09/GHSA-2jvw-9p97-g4qj/GHSA-2jvw-9p97-g4qj.json
index f5f4354fe32..bf31e9cc596 100644
--- a/advisories/unreviewed/2024/09/GHSA-2jvw-9p97-g4qj/GHSA-2jvw-9p97-g4qj.json
+++ b/advisories/unreviewed/2024/09/GHSA-2jvw-9p97-g4qj/GHSA-2jvw-9p97-g4qj.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2jvw-9p97-g4qj",
- "modified": "2024-09-16T21:30:38Z",
+ "modified": "2024-09-18T18:30:50Z",
"published": "2024-09-16T21:30:38Z",
"aliases": [
"CVE-2024-42796"
],
"details": "An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music genre entries.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-284"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-16T20:15:46Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-2p9x-h657-5mg3/GHSA-2p9x-h657-5mg3.json b/advisories/unreviewed/2024/09/GHSA-2p9x-h657-5mg3/GHSA-2p9x-h657-5mg3.json
new file mode 100644
index 00000000000..8e64d09818a
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-2p9x-h657-5mg3/GHSA-2p9x-h657-5mg3.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-2p9x-h657-5mg3",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2023-41611"
+ ],
+ "details": "Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41611"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.trevorkems.com/operation-big-brother-iot-camera"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T18:15:05Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-3j56-rc6g-pp7q/GHSA-3j56-rc6g-pp7q.json b/advisories/unreviewed/2024/09/GHSA-3j56-rc6g-pp7q/GHSA-3j56-rc6g-pp7q.json
index 02c6aff3068..8cd045bacf1 100644
--- a/advisories/unreviewed/2024/09/GHSA-3j56-rc6g-pp7q/GHSA-3j56-rc6g-pp7q.json
+++ b/advisories/unreviewed/2024/09/GHSA-3j56-rc6g-pp7q/GHSA-3j56-rc6g-pp7q.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3j56-rc6g-pp7q",
- "modified": "2024-09-18T06:30:46Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-18T06:30:46Z",
"aliases": [
"CVE-2024-45679"
],
"details": "Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-122"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T04:15:42Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-42h3-v86m-8hc5/GHSA-42h3-v86m-8hc5.json b/advisories/unreviewed/2024/09/GHSA-42h3-v86m-8hc5/GHSA-42h3-v86m-8hc5.json
index b856178578c..c7c0336bb78 100644
--- a/advisories/unreviewed/2024/09/GHSA-42h3-v86m-8hc5/GHSA-42h3-v86m-8hc5.json
+++ b/advisories/unreviewed/2024/09/GHSA-42h3-v86m-8hc5/GHSA-42h3-v86m-8hc5.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-42h3-v86m-8hc5",
- "modified": "2024-09-16T21:30:38Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-16T21:30:38Z",
"aliases": [
"CVE-2024-45414"
],
"details": "The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function. This function is responsible for decrypting RSA encrypted ciphertext, the encrypted data is supplied base64 encoded. The decoded ciphertext is stored on the stack without checking its length. An unauthenticated attacker can get RCE as root by exploiting this vulnerability.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-121"
],
- "severity": null,
+ "severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-16T21:15:45Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-5p8v-m885-q5fg/GHSA-5p8v-m885-q5fg.json b/advisories/unreviewed/2024/09/GHSA-5p8v-m885-q5fg/GHSA-5p8v-m885-q5fg.json
index 9be3e0fc8d3..a117359952f 100644
--- a/advisories/unreviewed/2024/09/GHSA-5p8v-m885-q5fg/GHSA-5p8v-m885-q5fg.json
+++ b/advisories/unreviewed/2024/09/GHSA-5p8v-m885-q5fg/GHSA-5p8v-m885-q5fg.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5p8v-m885-q5fg",
- "modified": "2024-09-18T09:30:35Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-18T09:30:35Z",
"aliases": [
"CVE-2024-41929"
],
"details": "Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-287"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T07:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-5pm9-6vq7-8mc4/GHSA-5pm9-6vq7-8mc4.json b/advisories/unreviewed/2024/09/GHSA-5pm9-6vq7-8mc4/GHSA-5pm9-6vq7-8mc4.json
index 224156a94cb..da6fc130d4a 100644
--- a/advisories/unreviewed/2024/09/GHSA-5pm9-6vq7-8mc4/GHSA-5pm9-6vq7-8mc4.json
+++ b/advisories/unreviewed/2024/09/GHSA-5pm9-6vq7-8mc4/GHSA-5pm9-6vq7-8mc4.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5pm9-6vq7-8mc4",
- "modified": "2024-09-18T09:30:36Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-18T09:30:36Z",
"aliases": [
"CVE-2024-47001"
],
"details": "Hidden functionality issue in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-912"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T07:15:04Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-5qfp-r7q3-257g/GHSA-5qfp-r7q3-257g.json b/advisories/unreviewed/2024/09/GHSA-5qfp-r7q3-257g/GHSA-5qfp-r7q3-257g.json
index 3a15be7d06f..584fbf997b9 100644
--- a/advisories/unreviewed/2024/09/GHSA-5qfp-r7q3-257g/GHSA-5qfp-r7q3-257g.json
+++ b/advisories/unreviewed/2024/09/GHSA-5qfp-r7q3-257g/GHSA-5qfp-r7q3-257g.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5qfp-r7q3-257g",
- "modified": "2024-09-16T21:30:38Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-16T21:30:38Z",
"aliases": [
"CVE-2024-45416"
],
"details": "The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init function. The session -LUA- files are stored in the directory /var/lua_session, the function iterates on all files in this directory and executes them using the function dofile without any validation if it is a valid session file or not. An attacker who is able to write a malicious file in the sessions directory can get RCE as root.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-829"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-16T21:15:46Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-68ww-7h9f-48qx/GHSA-68ww-7h9f-48qx.json b/advisories/unreviewed/2024/09/GHSA-68ww-7h9f-48qx/GHSA-68ww-7h9f-48qx.json
index e1b25af30ff..29936bd5a9f 100644
--- a/advisories/unreviewed/2024/09/GHSA-68ww-7h9f-48qx/GHSA-68ww-7h9f-48qx.json
+++ b/advisories/unreviewed/2024/09/GHSA-68ww-7h9f-48qx/GHSA-68ww-7h9f-48qx.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-68ww-7h9f-48qx",
- "modified": "2024-09-16T21:30:38Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-16T21:30:38Z",
"aliases": [
"CVE-2024-45415"
],
"details": "The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function. This function is responsible for validating the checksum of data in post request. The checksum is sent encrypted in the request, the function decrypts it and stores the checksum on the stack without validating it. An unauthenticated attacker can get RCE as root by exploiting this vulnerability.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-121"
],
- "severity": null,
+ "severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-16T21:15:45Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json b/advisories/unreviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json
new file mode 100644
index 00000000000..58c4156b818
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-723h-x37g-f8qm/GHSA-723h-x37g-f8qm.json
@@ -0,0 +1,39 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-723h-x37g-f8qm",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2023-47105"
+ ],
+ "details": "exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47105"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/chaosblade-io/chaosblade/blob/0a07380c9899febb2b544132783b376b44226cca/exec/os/executor.go#L68"
+ },
+ {
+ "type": "WEB",
+ "url": "https://narrow-oatmeal-0c0.notion.site/ChaosBlade-Remote-Command-Execution-CVE-2023-47105-4f5459046488436caaec2bced6ff26d7"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T17:15:18Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-8xm2-mrh9-q3x9/GHSA-8xm2-mrh9-q3x9.json b/advisories/unreviewed/2024/09/GHSA-8xm2-mrh9-q3x9/GHSA-8xm2-mrh9-q3x9.json
index ba4e5e4e2e0..5fae5d07a86 100644
--- a/advisories/unreviewed/2024/09/GHSA-8xm2-mrh9-q3x9/GHSA-8xm2-mrh9-q3x9.json
+++ b/advisories/unreviewed/2024/09/GHSA-8xm2-mrh9-q3x9/GHSA-8xm2-mrh9-q3x9.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8xm2-mrh9-q3x9",
- "modified": "2024-09-16T21:30:38Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-16T21:30:38Z",
"aliases": [
"CVE-2024-42798"
],
"details": "An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-269"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-16T20:15:46Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-9387-xrfr-3wfr/GHSA-9387-xrfr-3wfr.json b/advisories/unreviewed/2024/09/GHSA-9387-xrfr-3wfr/GHSA-9387-xrfr-3wfr.json
new file mode 100644
index 00000000000..4129916ee06
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-9387-xrfr-3wfr/GHSA-9387-xrfr-3wfr.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-9387-xrfr-3wfr",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2023-41610"
+ ],
+ "details": "Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41610"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.trevorkems.com/operation-big-brother-iot-camera"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T18:15:05Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-97r7-fmq6-w47h/GHSA-97r7-fmq6-w47h.json b/advisories/unreviewed/2024/09/GHSA-97r7-fmq6-w47h/GHSA-97r7-fmq6-w47h.json
index 12c0699bea8..daac59763a8 100644
--- a/advisories/unreviewed/2024/09/GHSA-97r7-fmq6-w47h/GHSA-97r7-fmq6-w47h.json
+++ b/advisories/unreviewed/2024/09/GHSA-97r7-fmq6-w47h/GHSA-97r7-fmq6-w47h.json
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-22"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-cj63-c83g-7mc2/GHSA-cj63-c83g-7mc2.json b/advisories/unreviewed/2024/09/GHSA-cj63-c83g-7mc2/GHSA-cj63-c83g-7mc2.json
index a7b46d6c21f..e678b06cea8 100644
--- a/advisories/unreviewed/2024/09/GHSA-cj63-c83g-7mc2/GHSA-cj63-c83g-7mc2.json
+++ b/advisories/unreviewed/2024/09/GHSA-cj63-c83g-7mc2/GHSA-cj63-c83g-7mc2.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cj63-c83g-7mc2",
- "modified": "2024-09-13T15:31:35Z",
+ "modified": "2024-09-18T18:30:50Z",
"published": "2024-09-13T15:31:35Z",
"aliases": [
"CVE-2024-8242"
diff --git a/advisories/unreviewed/2024/09/GHSA-cwr3-4fc3-j8h8/GHSA-cwr3-4fc3-j8h8.json b/advisories/unreviewed/2024/09/GHSA-cwr3-4fc3-j8h8/GHSA-cwr3-4fc3-j8h8.json
index db1ae43960f..b2f993f39a1 100644
--- a/advisories/unreviewed/2024/09/GHSA-cwr3-4fc3-j8h8/GHSA-cwr3-4fc3-j8h8.json
+++ b/advisories/unreviewed/2024/09/GHSA-cwr3-4fc3-j8h8/GHSA-cwr3-4fc3-j8h8.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cwr3-4fc3-j8h8",
- "modified": "2024-09-17T21:30:33Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-17T21:30:33Z",
"aliases": [
"CVE-2024-8904"
],
"details": "Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-843"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T21:15:12Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-f7pg-xgpm-7pv6/GHSA-f7pg-xgpm-7pv6.json b/advisories/unreviewed/2024/09/GHSA-f7pg-xgpm-7pv6/GHSA-f7pg-xgpm-7pv6.json
index de285f7e217..f33f464bea9 100644
--- a/advisories/unreviewed/2024/09/GHSA-f7pg-xgpm-7pv6/GHSA-f7pg-xgpm-7pv6.json
+++ b/advisories/unreviewed/2024/09/GHSA-f7pg-xgpm-7pv6/GHSA-f7pg-xgpm-7pv6.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f7pg-xgpm-7pv6",
- "modified": "2024-09-18T06:30:46Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-18T06:30:46Z",
"aliases": [
"CVE-2024-42404"
],
"details": "SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-89"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T06:15:02Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-jpqh-5rm6-j8j7/GHSA-jpqh-5rm6-j8j7.json b/advisories/unreviewed/2024/09/GHSA-jpqh-5rm6-j8j7/GHSA-jpqh-5rm6-j8j7.json
new file mode 100644
index 00000000000..7a0d3c121d7
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-jpqh-5rm6-j8j7/GHSA-jpqh-5rm6-j8j7.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-jpqh-5rm6-j8j7",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2023-41612"
+ ],
+ "details": "Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41612"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.trevorkems.com/operation-big-brother-iot-camera"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T18:15:05Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-mq89-7cwq-chfg/GHSA-mq89-7cwq-chfg.json b/advisories/unreviewed/2024/09/GHSA-mq89-7cwq-chfg/GHSA-mq89-7cwq-chfg.json
index 582f08813ed..ebbd9c1872d 100644
--- a/advisories/unreviewed/2024/09/GHSA-mq89-7cwq-chfg/GHSA-mq89-7cwq-chfg.json
+++ b/advisories/unreviewed/2024/09/GHSA-mq89-7cwq-chfg/GHSA-mq89-7cwq-chfg.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mq89-7cwq-chfg",
- "modified": "2024-09-16T21:30:38Z",
+ "modified": "2024-09-18T18:30:50Z",
"published": "2024-09-16T21:30:38Z",
"aliases": [
"CVE-2024-45413"
],
"details": "The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length. An authenticated attacker can get RCE as root by exploiting this vulnerability.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-121"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-16T21:15:45Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-mqp5-vpv8-vhqm/GHSA-mqp5-vpv8-vhqm.json b/advisories/unreviewed/2024/09/GHSA-mqp5-vpv8-vhqm/GHSA-mqp5-vpv8-vhqm.json
index 0b08235a9ea..90127114e65 100644
--- a/advisories/unreviewed/2024/09/GHSA-mqp5-vpv8-vhqm/GHSA-mqp5-vpv8-vhqm.json
+++ b/advisories/unreviewed/2024/09/GHSA-mqp5-vpv8-vhqm/GHSA-mqp5-vpv8-vhqm.json
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
- "CWE-288"
+ "CWE-288",
+ "CWE-306"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-q898-c98g-f82h/GHSA-q898-c98g-f82h.json b/advisories/unreviewed/2024/09/GHSA-q898-c98g-f82h/GHSA-q898-c98g-f82h.json
new file mode 100644
index 00000000000..9972eaf2dfe
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-q898-c98g-f82h/GHSA-q898-c98g-f82h.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-q898-c98g-f82h",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2024-46086"
+ ],
+ "details": "FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46086"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/PG2Stom/cms/tree/main/12/readme.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T16:15:06Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-r288-8r34-4php/GHSA-r288-8r34-4php.json b/advisories/unreviewed/2024/09/GHSA-r288-8r34-4php/GHSA-r288-8r34-4php.json
index 98787237438..7052a2b69ca 100644
--- a/advisories/unreviewed/2024/09/GHSA-r288-8r34-4php/GHSA-r288-8r34-4php.json
+++ b/advisories/unreviewed/2024/09/GHSA-r288-8r34-4php/GHSA-r288-8r34-4php.json
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-78"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-rggq-pvh6-78hv/GHSA-rggq-pvh6-78hv.json b/advisories/unreviewed/2024/09/GHSA-rggq-pvh6-78hv/GHSA-rggq-pvh6-78hv.json
new file mode 100644
index 00000000000..472e1361531
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-rggq-pvh6-78hv/GHSA-rggq-pvh6-78hv.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-rggq-pvh6-78hv",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2024-45523"
+ ],
+ "details": "An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attempts through API SOAP.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45523"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.bravurasecurity.com/cve-2024-45523-resource-leak-in-api-after-a-failed-login-attempt"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T18:15:06Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-vggf-h36f-57fp/GHSA-vggf-h36f-57fp.json b/advisories/unreviewed/2024/09/GHSA-vggf-h36f-57fp/GHSA-vggf-h36f-57fp.json
index e6a5871f1fe..fa83a59d05d 100644
--- a/advisories/unreviewed/2024/09/GHSA-vggf-h36f-57fp/GHSA-vggf-h36f-57fp.json
+++ b/advisories/unreviewed/2024/09/GHSA-vggf-h36f-57fp/GHSA-vggf-h36f-57fp.json
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vggf-h36f-57fp",
- "modified": "2024-09-11T12:30:52Z",
+ "modified": "2024-09-18T18:30:50Z",
"published": "2024-09-11T12:30:52Z",
"aliases": [
"CVE-2024-45787"
],
"details": "This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL and intercepting response of the API request leading to exposure of sensitive information belonging to other users.",
"severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+ },
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
diff --git a/advisories/unreviewed/2024/09/GHSA-vrrc-qv8c-m5rg/GHSA-vrrc-qv8c-m5rg.json b/advisories/unreviewed/2024/09/GHSA-vrrc-qv8c-m5rg/GHSA-vrrc-qv8c-m5rg.json
index 5755fd206a9..5e96761ac60 100644
--- a/advisories/unreviewed/2024/09/GHSA-vrrc-qv8c-m5rg/GHSA-vrrc-qv8c-m5rg.json
+++ b/advisories/unreviewed/2024/09/GHSA-vrrc-qv8c-m5rg/GHSA-vrrc-qv8c-m5rg.json
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-78"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2024/09/GHSA-wpr3-95vq-q76j/GHSA-wpr3-95vq-q76j.json b/advisories/unreviewed/2024/09/GHSA-wpr3-95vq-q76j/GHSA-wpr3-95vq-q76j.json
index d519515642b..0f6882d7693 100644
--- a/advisories/unreviewed/2024/09/GHSA-wpr3-95vq-q76j/GHSA-wpr3-95vq-q76j.json
+++ b/advisories/unreviewed/2024/09/GHSA-wpr3-95vq-q76j/GHSA-wpr3-95vq-q76j.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wpr3-95vq-q76j",
- "modified": "2024-09-16T21:30:38Z",
+ "modified": "2024-09-18T18:30:50Z",
"published": "2024-09-16T21:30:38Z",
"aliases": [
"CVE-2024-42795"
],
"details": "An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-284"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-16T20:15:46Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-wpx8-pm5v-8hrp/GHSA-wpx8-pm5v-8hrp.json b/advisories/unreviewed/2024/09/GHSA-wpx8-pm5v-8hrp/GHSA-wpx8-pm5v-8hrp.json
index 3e66b4070e0..acaefb64f63 100644
--- a/advisories/unreviewed/2024/09/GHSA-wpx8-pm5v-8hrp/GHSA-wpx8-pm5v-8hrp.json
+++ b/advisories/unreviewed/2024/09/GHSA-wpx8-pm5v-8hrp/GHSA-wpx8-pm5v-8hrp.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wpx8-pm5v-8hrp",
- "modified": "2024-09-18T09:30:35Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-18T09:30:35Z",
"aliases": [
"CVE-2024-43778"
],
"details": "OS command injection vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-78"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T07:15:03Z"
diff --git a/advisories/unreviewed/2024/09/GHSA-xrjg-w5fr-6ph9/GHSA-xrjg-w5fr-6ph9.json b/advisories/unreviewed/2024/09/GHSA-xrjg-w5fr-6ph9/GHSA-xrjg-w5fr-6ph9.json
new file mode 100644
index 00000000000..595abaaa29c
--- /dev/null
+++ b/advisories/unreviewed/2024/09/GHSA-xrjg-w5fr-6ph9/GHSA-xrjg-w5fr-6ph9.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-xrjg-w5fr-6ph9",
+ "modified": "2024-09-18T18:30:51Z",
+ "published": "2024-09-18T18:30:51Z",
+ "aliases": [
+ "CVE-2024-34399"
+ ],
+ "details": "**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This vulnerability only affects products that are no longer supported by the maintainer and the impacted version for this vulnerability is 7.6.04 only.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34399"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.gruppotim.it/it/footer/red-team.html"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-09-18T18:15:06Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json b/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json
index 88fcfb610c3..c680b924b1f 100644
--- a/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json
+++ b/advisories/unreviewed/2024/09/GHSA-xrx8-f378-fwph/GHSA-xrx8-f378-fwph.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xrx8-f378-fwph",
- "modified": "2024-09-17T21:30:33Z",
+ "modified": "2024-09-18T18:30:51Z",
"published": "2024-09-17T21:30:33Z",
"aliases": [
"CVE-2024-8905"
],
"details": "Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium)",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-122"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T21:15:13Z"