netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-cvcx-g7wh-x8rf
GHSA-cvcx-g7wh-x8rf
This commit is contained in:
advisory-database[bot]
2024-05-20 21:26:24 +00:00
parent 77a244012e
commit c594cded35
2 changed files with 81 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/12/GHSA-cvcx-g7wh-x8rf/GHSA-cvcx-g7wh-x8rf.json
+81
View File
@@ -0,0 +1,81 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cvcx-g7wh-x8rf",
"modified": "2024-05-20T21:24:53Z",
"published": "2022-12-23T00:30:23Z",
"aliases": [
"CVE-2022-47931"
],
"summary": "Collision of hash values in github.com/bnb-chain/tss-lib",
"details": "IO FinNet tss-lib before 2.0.0 allows a collision of hash values.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"package": {
"ecosystem": "Go",
"name": "github.com/bnb-chain/tss-lib"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.6-0.20230324145555-bb6fb30bd3eb"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47931"
},
{
"type": "WEB",
"url": "https://github.com/bnb-chain/tss-lib/pull/233"
},
{
"type": "WEB",
"url": "https://github.com/IoFinnet/threshlib/commit/369ec50be1437588a9733443bcb2f15b794601d4"
},
{
"type": "WEB",
"url": "https://github.com/bnb-chain/tss-lib/commit/bb6fb30bd3ebd35c755109836aa1a5ee6126c8a0"
},
{
"type": "WEB",
"url": "https://github.com/IoFinnet/threshlib/releases/tag/v2.0.0"
},
{
"type": "PACKAGE",
"url": "https://github.com/bnb-chain/tss-lib"
},
{
"type": "WEB",
"url": "https://github.com/golang/vulndb/blob/master/data/reports/GO-2023-1904.yaml"
},
{
"type": "WEB",
"url": "https://medium.com/@iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b"
}
],
"database_specific": {
"cwe_ids": [
"CWE-327"
],
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2024-05-20T21:24:53Z",
"nvd_published_at": "2022-12-23T00:15:00Z"
}
}
advisories/unreviewed/2022/12/GHSA-cvcx-g7wh-x8rf/GHSA-cvcx-g7wh-x8rf.json
-46
View File
@@ -1,46 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cvcx-g7wh-x8rf",
"modified": "2022-12-31T00:30:23Z",
"published": "2022-12-23T00:30:23Z",
"aliases": [
"CVE-2022-47931"
],
"details": "IO FinNet tss-lib before 2.0.0 allows a collision of hash values.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-47931"
},
{
"type": "WEB",
"url": "https://github.com/IoFinnet/tss-lib/commit/369ec50be1437588a9733443bcb2f15b794601d4"
},
{
"type": "WEB",
"url": "https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0"
},
{
"type": "WEB",
"url": "https://medium.com/@iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b"
}
],
"database_specific": {
"cwe_ids": [
"CWE-327"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-12-23T00:15:00Z"
}
}