netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-10-01 18:32:44 +00:00
parent d864ad3b4c
commit b5671dd936
37 changed files with 837 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/05/GHSA-7823-23gq-8g79/GHSA-7823-23gq-8g79.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-hwhw-f642-jhqq/GHSA-hwhw-f642-jhqq.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hwhw-f642-jhqq",
"modified": "2023-07-31T18:30:19Z",
"modified": "2024-10-01T18:31:15Z",
"published": "2023-07-19T00:31:16Z",
"aliases": [
"CVE-2023-22506"
advisories/unreviewed/2023/07/GHSA-jm25-87xp-4h76/GHSA-jm25-87xp-4h76.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jm25-87xp-4h76",
"modified": "2024-04-04T05:32:22Z",
"modified": "2024-10-01T18:31:15Z",
"published": "2023-07-06T19:24:08Z",
"aliases": [
"CVE-2023-22501"
advisories/unreviewed/2023/09/GHSA-4g5h-7prv-mvj5/GHSA-4g5h-7prv-mvj5.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2023/09/GHSA-pm38-4f58-28pj/GHSA-pm38-4f58-28pj.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-3rw3-pfv7-m7r7/GHSA-3rw3-pfv7-m7r7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3rw3-pfv7-m7r7",
"modified": "2024-09-27T15:30:34Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-27T15:30:34Z",
"aliases": [
"CVE-2024-46857"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix bridge mode operations when there are no VFs\n\nCurrently, trying to set the bridge mode attribute when numvfs=0 leads to a\ncrash:\n\nbridge link set dev eth2 hwmode vepa\n\n[ 168.967392] BUG: kernel NULL pointer dereference, address: 0000000000000030\n[...]\n[ 168.969989] RIP: 0010:mlx5_add_flow_rules+0x1f/0x300 [mlx5_core]\n[...]\n[ 168.976037] Call Trace:\n[ 168.976188] <TASK>\n[ 168.978620] _mlx5_eswitch_set_vepa_locked+0x113/0x230 [mlx5_core]\n[ 168.979074] mlx5_eswitch_set_vepa+0x7f/0xa0 [mlx5_core]\n[ 168.979471] rtnl_bridge_setlink+0xe9/0x1f0\n[ 168.979714] rtnetlink_rcv_msg+0x159/0x400\n[ 168.980451] netlink_rcv_skb+0x54/0x100\n[ 168.980675] netlink_unicast+0x241/0x360\n[ 168.980918] netlink_sendmsg+0x1f6/0x430\n[ 168.981162] ____sys_sendmsg+0x3bb/0x3f0\n[ 168.982155] ___sys_sendmsg+0x88/0xd0\n[ 168.985036] __sys_sendmsg+0x59/0xa0\n[ 168.985477] do_syscall_64+0x79/0x150\n[ 168.987273] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 168.987773] RIP: 0033:0x7f8f7950f917\n\n(esw->fdb_table.legacy.vepa_fdb is null)\n\nThe bridge mode is only relevant when there are multiple functions per\nport. Therefore, prevent setting and getting this setting when there are no\nVFs.\n\nNote that after this change, there are no settings to change on the PF\ninterface using `bridge link` when there are no VFs, so the interface no\nlonger appears in the `bridge link` output.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:17Z"
advisories/unreviewed/2024/09/GHSA-4f4g-mjgj-wqjc/GHSA-4f4g-mjgj-wqjc.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-259"
"CWE-259",
"CWE-798"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-4mm4-rvx3-h58h/GHSA-4mm4-rvx3-h58h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4mm4-rvx3-h58h",
"modified": "2024-09-27T15:30:34Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-27T15:30:34Z",
"aliases": [
"CVE-2024-46858"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: Fix uaf in __timer_delete_sync\n\nThere are two paths to access mptcp_pm_del_add_timer, result in a race\ncondition:\n\n CPU1\t\t\t\tCPU2\n ==== ====\n net_rx_action\n napi_poll netlink_sendmsg\n __napi_poll netlink_unicast\n process_backlog netlink_unicast_kernel\n __netif_receive_skb genl_rcv\n __netif_receive_skb_one_core netlink_rcv_skb\n NF_HOOK genl_rcv_msg\n ip_local_deliver_finish genl_family_rcv_msg\n ip_protocol_deliver_rcu genl_family_rcv_msg_doit\n tcp_v4_rcv mptcp_pm_nl_flush_addrs_doit\n tcp_v4_do_rcv mptcp_nl_remove_addrs_list\n tcp_rcv_established mptcp_pm_remove_addrs_and_subflows\n tcp_data_queue remove_anno_list_by_saddr\n mptcp_incoming_options mptcp_pm_del_add_timer\n mptcp_pm_del_add_timer kfree(entry)\n\nIn remove_anno_list_by_saddr(running on CPU2), after leaving the critical\nzone protected by \"pm.lock\", the entry will be released, which leads to the\noccurrence of uaf in the mptcp_pm_del_add_timer(running on CPU1).\n\nKeeping a reference to add_timer inside the lock, and calling\nsk_stop_timer_sync() with this reference, instead of \"entry->add_timer\".\n\nMove list_del(&entry->list) to mptcp_pm_del_add_timer and inside the pm lock,\ndo not directly access any members of the entry outside the pm lock, which\ncan avoid similar \"entry->x\" uaf.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:17Z"
advisories/unreviewed/2024/09/GHSA-65xf-588v-56fv/GHSA-65xf-588v-56fv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-65xf-588v-56fv",
"modified": "2024-09-30T21:31:07Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-30T21:31:07Z",
"aliases": [
"CVE-2024-46503"
],
"details": "An issue in the _readFileSync function of Simple-Spellchecker v1.0.2 allows attackers to read arbitrary files via a directory traversal.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-30T21:15:03Z"
advisories/unreviewed/2024/09/GHSA-76f2-qj4m-vmqr/GHSA-76f2-qj4m-vmqr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-76f2-qj4m-vmqr",
"modified": "2024-09-27T15:30:34Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-27T15:30:34Z",
"aliases": [
"CVE-2024-46868"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()\n\nIf the __qcuefi pointer is not set, then in the original code, we would\nhold onto the lock. That means that if we tried to set it later, then\nit would cause a deadlock. Drop the lock on the error path. That's\nwhat all the callers are expecting.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-667"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:18Z"
advisories/unreviewed/2024/09/GHSA-97x9-7h6v-3jx9/GHSA-97x9-7h6v-3jx9.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-97x9-7h6v-3jx9",
"modified": "2024-10-01T15:32:03Z",
"modified": "2024-10-01T18:31:16Z",
"published": "2024-09-17T21:30:32Z",
"aliases": [
"CVE-2024-8900"
@@ -28,6 +28,14 @@
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-33"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-47"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-49"
}
],
"database_specific": {
advisories/unreviewed/2024/09/GHSA-cv8x-m68j-4834/GHSA-cv8x-m68j-4834.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cv8x-m68j-4834",
"modified": "2024-09-27T15:30:34Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-27T15:30:34Z",
"aliases": [
"CVE-2024-46856"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: dp83822: Fix NULL pointer dereference on DP83825 devices\n\nThe probe() function is only used for DP83822 and DP83826 PHY,\nleaving the private data pointer uninitialized for the DP83825 models\nwhich causes a NULL pointer dereference in the recently introduced/changed\nfunctions dp8382x_config_init() and dp83822_set_wol().\n\nAdd the dp8382x_probe() function, so all PHY models will have a valid\nprivate data pointer to fix this issue and also prevent similar issues\nin the future.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:17Z"
advisories/unreviewed/2024/09/GHSA-gfhp-57f6-m54h/GHSA-gfhp-57f6-m54h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gfhp-57f6-m54h",
"modified": "2024-09-27T15:30:34Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-27T15:30:34Z",
"aliases": [
"CVE-2024-46866"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/client: add missing bo locking in show_meminfo()\n\nbo_meminfo() wants to inspect bo state like tt and the ttm resource,\nhowever this state can change at any point leading to stuff like NPD and\nUAF, if the bo lock is not held. Grab the bo lock when calling\nbo_meminfo(), ensuring we drop any spinlocks first. In the case of\nobject_idr we now also need to hold a ref.\n\nv2 (MattB)\n - Also add xe_bo_assert_held()\n\n(cherry picked from commit 4f63d712fa104c3ebefcb289d1e733e86d8698c7)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-667"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:17Z"
advisories/unreviewed/2024/09/GHSA-gfx6-fv9x-fgpc/GHSA-gfx6-fv9x-fgpc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gfx6-fv9x-fgpc",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-10-01T18:31:16Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-39081"
],
"details": "An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communications.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-294"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T14:15:19Z"
advisories/unreviewed/2024/09/GHSA-pwxr-xm9v-qfvh/GHSA-pwxr-xm9v-qfvh.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pwxr-xm9v-qfvh",
"modified": "2024-09-30T06:33:37Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-30T06:33:37Z",
"aliases": [
"CVE-2024-8536"
],
"details": "The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-30T06:15:14Z"
advisories/unreviewed/2024/09/GHSA-rp89-9jxh-73fw/GHSA-rp89-9jxh-73fw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rp89-9jxh-73fw",
"modified": "2024-09-27T15:30:34Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-27T15:30:34Z",
"aliases": [
"CVE-2024-46867"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/client: fix deadlock in show_meminfo()\n\nThere is a real deadlock as well as sleeping in atomic() bug in here, if\nthe bo put happens to be the last ref, since bo destruction wants to\ngrab the same spinlock and sleeping locks. Fix that by dropping the ref\nusing xe_bo_put_deferred(), and moving the final commit outside of the\nlock. Dropping the lock around the put is tricky since the bo can go\nout of scope and delete itself from the list, making it difficult to\nnavigate to the next list entry.\n\n(cherry picked from commit 0083b8e6f11d7662283a267d4ce7c966812ffd8a)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-667"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:17Z"
advisories/unreviewed/2024/09/GHSA-vx7x-qwmp-h33c/GHSA-vx7x-qwmp-h33c.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vx7x-qwmp-h33c",
"modified": "2024-09-25T15:31:12Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-25T15:31:12Z",
"aliases": [
"CVE-2024-6512"
],
"details": "Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-863"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-25T14:15:05Z"
advisories/unreviewed/2024/09/GHSA-x8x2-w2mg-gx8m/GHSA-x8x2-w2mg-gx8m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x8x2-w2mg-gx8m",
"modified": "2024-09-27T15:30:34Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-27T15:30:34Z",
"aliases": [
"CVE-2024-46865"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfou: fix initialization of grc\n\nThe grc must be initialize first. There can be a condition where if\nfou is NULL, goto out will be executed and grc would be used\nuninitialized.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-908"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:17Z"
advisories/unreviewed/2024/09/GHSA-xgc6-jf52-wphf/GHSA-xgc6-jf52-wphf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xgc6-jf52-wphf",
"modified": "2024-09-30T06:33:37Z",
"modified": "2024-10-01T18:31:17Z",
"published": "2024-09-30T06:33:37Z",
"aliases": [
"CVE-2024-8379"
],
"details": "The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-30T06:15:14Z"
advisories/unreviewed/2024/10/GHSA-3qpq-hc75-5535/GHSA-3qpq-hc75-5535.json
+51
View File
@@ -0,0 +1,51 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3qpq-hc75-5535",
"modified": "2024-10-01T18:31:18Z",
"published": "2024-10-01T18:31:18Z",
"aliases": [
"CVE-2024-9398"
],
"details": "By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9398"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881037"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-46"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-47"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-49"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-50"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-01T16:15:10Z"
}
}

Some files were not shown because too many files have changed in this diff Show More