netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2mj3-vfvx-fc43
GHSA-7p9f-6x8j-gxxp
GHSA-gh5c-3h97-2f3q
GHSA-2m9h-r57g-45pj
GHSA-px8v-pp82-rcvr
This commit is contained in:
advisory-database[bot]
2024-12-04 22:17:44 +00:00
parent ec89f3f566
commit 945231f3ac
5 changed files with 50 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/11/GHSA-2mj3-vfvx-fc43/GHSA-2mj3-vfvx-fc43.json
+12 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mj3-vfvx-fc43",
"modified": "2024-12-02T21:38:01Z",
"modified": "2024-12-04T22:17:00Z",
"published": "2024-11-29T18:34:03Z",
"aliases": [
"CVE-2024-36621"
@@ -9,6 +9,10 @@
"summary": "Moby Race Condition vulnerability",
"details": "moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
@@ -48,6 +52,10 @@
"type": "WEB",
"url": "https://gist.github.com/1047524396/5d44459edab5fafcdf86b43909b81135"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-2mj3-vfvx-fc43"
},
{
"type": "PACKAGE",
"url": "https://github.com/moby/moby"
@@ -58,7 +66,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-362"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-12-02T21:38:01Z",
advisories/github-reviewed/2024/11/GHSA-7p9f-6x8j-gxxp/GHSA-7p9f-6x8j-gxxp.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7p9f-6x8j-gxxp",
"modified": "2024-11-26T21:50:30Z",
"modified": "2024-12-04T22:16:58Z",
"published": "2024-11-26T21:50:30Z",
"aliases": [
"CVE-2024-8676"
],
"summary": "CRI-O: Maliciously structured checkpoint file can gain arbitrary node access",
"details": "### Impact\n\n\n### Patches\n1.31.1, 1.30.6, 1.29.8\n\n### Workarounds\nset `enable_criu_support = false` \n\n### References\n_Are there any links users can visit to find out more?_\n",
"details": "### Impact\n\n### Patches\n1.31.1, 1.30.6, 1.29.8\n\n### Workarounds\nset `enable_criu_support = false` \n\n### References\n_Are there any links users can visit to find out more?_\n",
"severity": [
{
"type": "CVSS_V3",
advisories/github-reviewed/2024/11/GHSA-gh5c-3h97-2f3q/GHSA-gh5c-3h97-2f3q.json
+12 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gh5c-3h97-2f3q",
"modified": "2024-12-02T21:38:26Z",
"modified": "2024-12-04T22:17:14Z",
"published": "2024-11-29T18:34:03Z",
"aliases": [
"CVE-2024-36623"
@@ -9,6 +9,10 @@
"summary": "Moby Race Condition vulnerability",
"details": "moby v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
@@ -48,6 +52,10 @@
"type": "WEB",
"url": "https://gist.github.com/1047524396/c192c0159a19bf58a4373b696467dc29"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-gh5c-3h97-2f3q"
},
{
"type": "PACKAGE",
"url": "https://github.com/moby/moby"
@@ -58,7 +66,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-362"
],
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-12-02T21:38:26Z",
advisories/github-reviewed/2024/12/GHSA-2m9h-r57g-45pj/GHSA-2m9h-r57g-45pj.json
+22 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2m9h-r57g-45pj",
"modified": "2024-12-04T15:32:45Z",
"modified": "2024-12-04T22:17:12Z",
"published": "2024-12-04T15:32:45Z",
"aliases": [
"CVE-2024-54132"
@@ -33,6 +33,22 @@
]
}
]
},
{
"package": {
"ecosystem": "Go",
"name": "github.com/cli/cli"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
]
}
],
"references": [
@@ -40,6 +56,10 @@
"type": "WEB",
"url": "https://github.com/cli/cli/security/advisories/GHSA-2m9h-r57g-45pj"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54132"
},
{
"type": "WEB",
"url": "https://github.com/cli/cli/commit/1136764c369aaf0cae4ec2ee09dc35d871076932"
@@ -56,6 +76,6 @@
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-12-04T15:32:45Z",
"nvd_published_at": null
"nvd_published_at": "2024-12-04T16:15:26Z"
}
}
advisories/github-reviewed/2024/12/GHSA-px8v-pp82-rcvr/GHSA-px8v-pp82-rcvr.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-px8v-pp82-rcvr",
"modified": "2024-12-02T19:46:10Z",
"modified": "2024-12-04T22:16:38Z",
"published": "2024-12-02T17:28:14Z",
"aliases": [
"CVE-2024-53259"
],
"summary": "quic-go affected by an ICMP Packet Too Large Injection Attack on Linux",
"details": "### Impact\n\nAn off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used `IP_PMTUDISC_DO`, the kernel would then return a \"message too large\" error on `sendmsg`, i.e. when quic-go attempts to send a packet that exceeds the MTU claimed in that ICMP packet.\n\nBy setting this value to smaller than 1200 bytes (the minimum MTU for QUIC), the attacker can disrupt a QUIC connection. Crucially, this can be done after completion of the handshake, thereby circumventing any TCP fallback that might be implemented on the application layer (for example, many browsers fall back to HTTP over TCP if they're unable to establish a QUIC connection).\n\nAs far as I understand, the kernel tracks the MTU per 4-tuple, so the attacker needs to at least know the client's IP and port tuple to mount an attack (assuming that it knows the server's IP and port).\n\n### Patches\n\nThe fix is easy: Use `IP_PMTUDISC_PROBE` instead of `IP_PMTUDISC_DO`. This socket option only sets the DF bit, but disables the kernel's MTU tracking.\n\n_Has the problem been patched? What versions should users upgrade to?_\n\nFixed in https://github.com/quic-go/quic-go/pull/4729\nReleased in https://github.com/quic-go/quic-go/releases/tag/v0.48.2\n\n### Workarounds\n_Is there a way for users to fix or remediate the vulnerability without upgrading?_\n\nUse iptables to drop ICMP Unreachable packets.\n\n### References\n\n_Are there any links users can visit to find out more?_\n\nThis bug was discovered while doing research for my new IETF draft on IP fragmentation: https://datatracker.ietf.org/doc/draft-seemann-tsvwg-udp-fragmentation/\n",
"details": "### Impact\nAn off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used `IP_PMTUDISC_DO`, the kernel would then return a \"message too large\" error on `sendmsg`, i.e. when quic-go attempts to send a packet that exceeds the MTU claimed in that ICMP packet.\n\nBy setting this value to smaller than 1200 bytes (the minimum MTU for QUIC), the attacker can disrupt a QUIC connection. Crucially, this can be done after completion of the handshake, thereby circumventing any TCP fallback that might be implemented on the application layer (for example, many browsers fall back to HTTP over TCP if they're unable to establish a QUIC connection).\n\nAs far as I understand, the kernel tracks the MTU per 4-tuple, so the attacker needs to at least know the client's IP and port tuple to mount an attack (assuming that it knows the server's IP and port).\n\n### Patches\n\nThe fix is easy: Use `IP_PMTUDISC_PROBE` instead of `IP_PMTUDISC_DO`. This socket option only sets the DF bit, but disables the kernel's MTU tracking.\n\n_Has the problem been patched? What versions should users upgrade to?_\n\nFixed in https://github.com/quic-go/quic-go/pull/4729\nReleased in https://github.com/quic-go/quic-go/releases/tag/v0.48.2\n\n### Workarounds\n_Is there a way for users to fix or remediate the vulnerability without upgrading?_\n\nUse iptables to drop ICMP Unreachable packets.\n\n### References\n\n_Are there any links users can visit to find out more?_\n\nThis bug was discovered while doing research for my new IETF draft on IP fragmentation: https://datatracker.ietf.org/doc/draft-seemann-tsvwg-udp-fragmentation/\n",
"severity": [
{
"type": "CVSS_V3",