diff --git a/advisories/unreviewed/2024/07/GHSA-2mxj-r96x-vpcm/GHSA-2mxj-r96x-vpcm.json b/advisories/unreviewed/2024/07/GHSA-2mxj-r96x-vpcm/GHSA-2mxj-r96x-vpcm.json
index a41676a1369..9cfd73a34c7 100644
--- a/advisories/unreviewed/2024/07/GHSA-2mxj-r96x-vpcm/GHSA-2mxj-r96x-vpcm.json
+++ b/advisories/unreviewed/2024/07/GHSA-2mxj-r96x-vpcm/GHSA-2mxj-r96x-vpcm.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mxj-r96x-vpcm",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48866"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts\n\nSyzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug.\nThe root case is in missing validation check of actual number of endpoints.\n\nCode should not blindly access usb_host_interface::endpoint array, since\nit may contain less endpoints than code expects.\n\nFix it by adding missing validaion check and print an error if\nnumber of endpoints do not match expected number",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+ }
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-125"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:13Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-3phj-hmw4-hjjw/GHSA-3phj-hmw4-hjjw.json b/advisories/unreviewed/2024/07/GHSA-3phj-hmw4-hjjw/GHSA-3phj-hmw4-hjjw.json
new file mode 100644
index 00000000000..f72ce8e51fd
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-3phj-hmw4-hjjw/GHSA-3phj-hmw4-hjjw.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-3phj-hmw4-hjjw",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-4081"
+ ],
+ "details": "A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects NI LabVIEW 2024 Q1 and prior versions.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ },
+ {
+ "type": "CVSS_V4",
+ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4081"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-119"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json b/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json
index 86211fc2471..b8f3ab59a95 100644
--- a/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json
+++ b/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5cwv-6xqx-92m5",
- "modified": "2024-07-09T18:30:43Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-02T21:32:15Z",
"aliases": [
"CVE-2024-4467"
@@ -49,6 +49,14 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:4420"
},
+ {
+ "type": "WEB",
+ "url": "https://access.redhat.com/errata/RHSA-2024:4724"
+ },
+ {
+ "type": "WEB",
+ "url": "https://access.redhat.com/errata/RHSA-2024:4727"
+ },
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-4467"
diff --git a/advisories/unreviewed/2024/07/GHSA-655j-v78g-4xc5/GHSA-655j-v78g-4xc5.json b/advisories/unreviewed/2024/07/GHSA-655j-v78g-4xc5/GHSA-655j-v78g-4xc5.json
new file mode 100644
index 00000000000..b7bb9d0be60
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-655j-v78g-4xc5/GHSA-655j-v78g-4xc5.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-655j-v78g-4xc5",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-5602"
+ ],
+ "details": "A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted nitrace file.\n\nThe NI I/O Trace tool is installed as part of the NI System Configuration utilities included with many NI software products. Refer to the NI Security Advisory for identifying the version of NI IO Trace.exe installed. The NI I/O Trace tool was also previously released as NI Spy.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5602"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/stack-based-buffer-overflow-vulnerability-in-ni-io-trace-tool.html"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-121"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T14:15:15Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-6g4r-v8v9-hj9h/GHSA-6g4r-v8v9-hj9h.json b/advisories/unreviewed/2024/07/GHSA-6g4r-v8v9-hj9h/GHSA-6g4r-v8v9-hj9h.json
index b3de04771f9..58ad4396e18 100644
--- a/advisories/unreviewed/2024/07/GHSA-6g4r-v8v9-hj9h/GHSA-6g4r-v8v9-hj9h.json
+++ b/advisories/unreviewed/2024/07/GHSA-6g4r-v8v9-hj9h/GHSA-6g4r-v8v9-hj9h.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6g4r-v8v9-hj9h",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48864"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command\n\nWhen control vq receives a VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command\nrequest from the driver, presently there is no validation against the\nnumber of queue pairs to configure, or even if multiqueue had been\nnegotiated or not is unverified. This may lead to kernel panic due to\nuninitialized resource for the queues were there any bogus request\nsent down by untrusted driver. Tie up the loose ends there.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-908"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:13Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-74mq-wr7w-wwvw/GHSA-74mq-wr7w-wwvw.json b/advisories/unreviewed/2024/07/GHSA-74mq-wr7w-wwvw/GHSA-74mq-wr7w-wwvw.json
index f69b2e7ad7e..6397080aebe 100644
--- a/advisories/unreviewed/2024/07/GHSA-74mq-wr7w-wwvw/GHSA-74mq-wr7w-wwvw.json
+++ b/advisories/unreviewed/2024/07/GHSA-74mq-wr7w-wwvw/GHSA-74mq-wr7w-wwvw.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-74mq-wr7w-wwvw",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48855"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix kernel-infoleak for SCTP sockets\n\nsyzbot reported a kernel infoleak [1] of 4 bytes.\n\nAfter analysis, it turned out r->idiag_expires is not initialized\nif inet_sctp_diag_fill() calls inet_diag_msg_common_fill()\n\nMake sure to clear idiag_timer/idiag_retrans/idiag_expires\nand let inet_diag_msg_sctpasoc_fill() fill them again if needed.\n\n[1]\n\nBUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:121 [inline]\nBUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:154 [inline]\nBUG: KMSAN: kernel-infoleak in _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668\n instrument_copy_to_user include/linux/instrumented.h:121 [inline]\n copyout lib/iov_iter.c:154 [inline]\n _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668\n copy_to_iter include/linux/uio.h:162 [inline]\n simple_copy_to_iter+0xf3/0x140 net/core/datagram.c:519\n __skb_datagram_iter+0x2d5/0x11b0 net/core/datagram.c:425\n skb_copy_datagram_iter+0xdc/0x270 net/core/datagram.c:533\n skb_copy_datagram_msg include/linux/skbuff.h:3696 [inline]\n netlink_recvmsg+0x669/0x1c80 net/netlink/af_netlink.c:1977\n sock_recvmsg_nosec net/socket.c:948 [inline]\n sock_recvmsg net/socket.c:966 [inline]\n __sys_recvfrom+0x795/0xa10 net/socket.c:2097\n __do_sys_recvfrom net/socket.c:2115 [inline]\n __se_sys_recvfrom net/socket.c:2111 [inline]\n __x64_sys_recvfrom+0x19d/0x210 net/socket.c:2111\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nUninit was created at:\n slab_post_alloc_hook mm/slab.h:737 [inline]\n slab_alloc_node mm/slub.c:3247 [inline]\n __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4975\n kmalloc_reserve net/core/skbuff.c:354 [inline]\n __alloc_skb+0x545/0xf90 net/core/skbuff.c:426\n alloc_skb include/linux/skbuff.h:1158 [inline]\n netlink_dump+0x3e5/0x16c0 net/netlink/af_netlink.c:2248\n __netlink_dump_start+0xcf8/0xe90 net/netlink/af_netlink.c:2373\n netlink_dump_start include/linux/netlink.h:254 [inline]\n inet_diag_handler_cmd+0x2e7/0x400 net/ipv4/inet_diag.c:1341\n sock_diag_rcv_msg+0x24a/0x620\n netlink_rcv_skb+0x40c/0x7e0 net/netlink/af_netlink.c:2494\n sock_diag_rcv+0x63/0x80 net/core/sock_diag.c:277\n netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]\n netlink_unicast+0x1093/0x1360 net/netlink/af_netlink.c:1343\n netlink_sendmsg+0x14d9/0x1720 net/netlink/af_netlink.c:1919\n sock_sendmsg_nosec net/socket.c:705 [inline]\n sock_sendmsg net/socket.c:725 [inline]\n sock_write_iter+0x594/0x690 net/socket.c:1061\n do_iter_readv_writev+0xa7f/0xc70\n do_iter_write+0x52c/0x1500 fs/read_write.c:851\n vfs_writev fs/read_write.c:924 [inline]\n do_writev+0x645/0xe00 fs/read_write.c:967\n __do_sys_writev fs/read_write.c:1040 [inline]\n __se_sys_writev fs/read_write.c:1037 [inline]\n __x64_sys_writev+0xe5/0x120 fs/read_write.c:1037\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nBytes 68-71 of 2508 are uninitialized\nMemory access of size 2508 starts at ffff888114f9b000\nData copied to user address 00007f7fe09ff2e0\n\nCPU: 1 PID: 3478 Comm: syz-executor306 Not tainted 5.17.0-rc4-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+ }
],
"affected": [
@@ -53,9 +56,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:12Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-79hg-h6r6-64mm/GHSA-79hg-h6r6-64mm.json b/advisories/unreviewed/2024/07/GHSA-79hg-h6r6-64mm/GHSA-79hg-h6r6-64mm.json
index a51076cf480..6959d785969 100644
--- a/advisories/unreviewed/2024/07/GHSA-79hg-h6r6-64mm/GHSA-79hg-h6r6-64mm.json
+++ b/advisories/unreviewed/2024/07/GHSA-79hg-h6r6-64mm/GHSA-79hg-h6r6-64mm.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-79hg-h6r6-64mm",
- "modified": "2024-07-13T06:32:40Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-08T18:31:18Z",
"aliases": [
"CVE-2024-6409"
@@ -29,6 +29,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:4457"
},
+ {
+ "type": "WEB",
+ "url": "https://access.redhat.com/errata/RHSA-2024:4716"
+ },
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-6409"
diff --git a/advisories/unreviewed/2024/07/GHSA-8hqr-2pq7-7gv3/GHSA-8hqr-2pq7-7gv3.json b/advisories/unreviewed/2024/07/GHSA-8hqr-2pq7-7gv3/GHSA-8hqr-2pq7-7gv3.json
index d83bc4ae3e4..0506cd72df1 100644
--- a/advisories/unreviewed/2024/07/GHSA-8hqr-2pq7-7gv3/GHSA-8hqr-2pq7-7gv3.json
+++ b/advisories/unreviewed/2024/07/GHSA-8hqr-2pq7-7gv3/GHSA-8hqr-2pq7-7gv3.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8hqr-2pq7-7gv3",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48858"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix a race on command flush flow\n\nFix a refcount use after free warning due to a race on command entry.\nSuch race occurs when one of the commands releases its last refcount and\nfrees its index and entry while another process running command flush\nflow takes refcount to this command entry. The process which handles\ncommands flush may see this command as needed to be flushed if the other\nprocess released its refcount but didn't release the index yet. Fix it\nby adding the needed spin lock.\n\nIt fixes the following warning trace:\n\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 11 PID: 540311 at lib/refcount.c:25 refcount_warn_saturate+0x80/0xe0\n...\nRIP: 0010:refcount_warn_saturate+0x80/0xe0\n...\nCall Trace:\n \n mlx5_cmd_trigger_completions+0x293/0x340 [mlx5_core]\n mlx5_cmd_flush+0x3a/0xf0 [mlx5_core]\n enter_error_state+0x44/0x80 [mlx5_core]\n mlx5_fw_fatal_reporter_err_work+0x37/0xe0 [mlx5_core]\n process_one_work+0x1be/0x390\n worker_thread+0x4d/0x3d0\n ? rescuer_thread+0x350/0x350\n kthread+0x141/0x160\n ? set_kthread_struct+0x40/0x40\n ret_from_fork+0x1f/0x30\n ",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-362"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:12Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-8rjj-j4hj-jc98/GHSA-8rjj-j4hj-jc98.json b/advisories/unreviewed/2024/07/GHSA-8rjj-j4hj-jc98/GHSA-8rjj-j4hj-jc98.json
index 4761d9d7c06..4cca4f50f08 100644
--- a/advisories/unreviewed/2024/07/GHSA-8rjj-j4hj-jc98/GHSA-8rjj-j4hj-jc98.json
+++ b/advisories/unreviewed/2024/07/GHSA-8rjj-j4hj-jc98/GHSA-8rjj-j4hj-jc98.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8rjj-j4hj-jc98",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48859"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr\n\nThis node pointer is returned by of_find_compatible_node() with\nrefcount incremented. Calling of_node_put() to aovid the refcount leak.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:12Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-97c5-prqj-77gq/GHSA-97c5-prqj-77gq.json b/advisories/unreviewed/2024/07/GHSA-97c5-prqj-77gq/GHSA-97c5-prqj-77gq.json
index b15bdfb9385..f1465f5a29e 100644
--- a/advisories/unreviewed/2024/07/GHSA-97c5-prqj-77gq/GHSA-97c5-prqj-77gq.json
+++ b/advisories/unreviewed/2024/07/GHSA-97c5-prqj-77gq/GHSA-97c5-prqj-77gq.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-97c5-prqj-77gq",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48865"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix kernel panic when enabling bearer\n\nWhen enabling a bearer on a node, a kernel panic is observed:\n\n[ 4.498085] RIP: 0010:tipc_mon_prep+0x4e/0x130 [tipc]\n...\n[ 4.520030] Call Trace:\n[ 4.520689] \n[ 4.521236] tipc_link_build_proto_msg+0x375/0x750 [tipc]\n[ 4.522654] tipc_link_build_state_msg+0x48/0xc0 [tipc]\n[ 4.524034] __tipc_node_link_up+0xd7/0x290 [tipc]\n[ 4.525292] tipc_rcv+0x5da/0x730 [tipc]\n[ 4.526346] ? __netif_receive_skb_core+0xb7/0xfc0\n[ 4.527601] tipc_l2_rcv_msg+0x5e/0x90 [tipc]\n[ 4.528737] __netif_receive_skb_list_core+0x20b/0x260\n[ 4.530068] netif_receive_skb_list_internal+0x1bf/0x2e0\n[ 4.531450] ? dev_gro_receive+0x4c2/0x680\n[ 4.532512] napi_complete_done+0x6f/0x180\n[ 4.533570] virtnet_poll+0x29c/0x42e [virtio_net]\n...\n\nThe node in question is receiving activate messages in another\nthread after changing bearer status to allow message sending/\nreceiving in current thread:\n\n thread 1 | thread 2\n -------- | --------\n |\ntipc_enable_bearer() |\n test_and_set_bit_lock() |\n tipc_bearer_xmit_skb() |\n | tipc_l2_rcv_msg()\n | tipc_rcv()\n | __tipc_node_link_up()\n | tipc_link_build_state_msg()\n | tipc_link_build_proto_msg()\n | tipc_mon_prep()\n | {\n | ...\n | // null-pointer dereference\n | u16 gen = mon->dom_gen;\n | ...\n | }\n // Not being executed yet |\n tipc_mon_create() |\n { |\n ... |\n // allocate |\n mon = kzalloc(); |\n ... |\n } |\n\nMonitoring pointer in thread 2 is dereferenced before monitoring data\nis allocated in thread 1. This causes kernel panic.\n\nThis commit fixes it by allocating the monitoring data before enabling\nthe bearer to receive messages.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-476"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:13Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-9c8v-c8p9-2pjh/GHSA-9c8v-c8p9-2pjh.json b/advisories/unreviewed/2024/07/GHSA-9c8v-c8p9-2pjh/GHSA-9c8v-c8p9-2pjh.json
index c3b6d6aab99..3f433dc5836 100644
--- a/advisories/unreviewed/2024/07/GHSA-9c8v-c8p9-2pjh/GHSA-9c8v-c8p9-2pjh.json
+++ b/advisories/unreviewed/2024/07/GHSA-9c8v-c8p9-2pjh/GHSA-9c8v-c8p9-2pjh.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9c8v-c8p9-2pjh",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48861"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: fix use-after-free on vp_vdpa_remove\n\nWhen vp_vdpa driver is unbind, vp_vdpa is freed in vdpa_unregister_device\nand then vp_vdpa->mdev.pci_dev is dereferenced in vp_modern_remove,\ntriggering use-after-free.\n\nCall Trace of unbinding driver free vp_vdpa :\ndo_syscall_64\n vfs_write\n kernfs_fop_write_iter\n device_release_driver_internal\n pci_device_remove\n vp_vdpa_remove\n vdpa_unregister_device\n kobject_release\n device_release\n kfree\n\nCall Trace of dereference vp_vdpa->mdev.pci_dev:\nvp_modern_remove\n pci_release_selected_regions\n pci_release_region\n pci_resource_len\n pci_resource_end\n (dev)->resource[(bar)].end",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-416"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:13Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-9xxq-vvgh-v3r9/GHSA-9xxq-vvgh-v3r9.json b/advisories/unreviewed/2024/07/GHSA-9xxq-vvgh-v3r9/GHSA-9xxq-vvgh-v3r9.json
new file mode 100644
index 00000000000..d94d91e0e86
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-9xxq-vvgh-v3r9/GHSA-9xxq-vvgh-v3r9.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-9xxq-vvgh-v3r9",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-1737"
+ ],
+ "details": "Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name.\nThis issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1737"
+ },
+ {
+ "type": "WEB",
+ "url": "https://kb.isc.org/docs/cve-2024-1737"
+ },
+ {
+ "type": "WEB",
+ "url": "https://kb.isc.org/docs/rrset-limits-in-zones"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T15:15:03Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-ccff-2f27-4w8g/GHSA-ccff-2f27-4w8g.json b/advisories/unreviewed/2024/07/GHSA-ccff-2f27-4w8g/GHSA-ccff-2f27-4w8g.json
index 471d12dddbb..2407233855c 100644
--- a/advisories/unreviewed/2024/07/GHSA-ccff-2f27-4w8g/GHSA-ccff-2f27-4w8g.json
+++ b/advisories/unreviewed/2024/07/GHSA-ccff-2f27-4w8g/GHSA-ccff-2f27-4w8g.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ccff-2f27-4w8g",
- "modified": "2024-07-22T15:32:41Z",
+ "modified": "2024-07-23T15:31:09Z",
"published": "2024-07-22T15:32:41Z",
"aliases": [
"CVE-2024-41318"
@@ -18,6 +18,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41318"
},
+ {
+ "type": "WEB",
+ "url": "https://gist.github.com/yanggao017/dc88fb2e29291503addf1e7aa3775578"
+ },
{
"type": "WEB",
"url": "https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_5_apcli_wps_gen_pincode/README.md"
diff --git a/advisories/unreviewed/2024/07/GHSA-cqc3-8mfm-84p4/GHSA-cqc3-8mfm-84p4.json b/advisories/unreviewed/2024/07/GHSA-cqc3-8mfm-84p4/GHSA-cqc3-8mfm-84p4.json
index c54e5f95c03..bbd579397af 100644
--- a/advisories/unreviewed/2024/07/GHSA-cqc3-8mfm-84p4/GHSA-cqc3-8mfm-84p4.json
+++ b/advisories/unreviewed/2024/07/GHSA-cqc3-8mfm-84p4/GHSA-cqc3-8mfm-84p4.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cqc3-8mfm-84p4",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48862"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost: fix hung thread due to erroneous iotlb entries\n\nIn vhost_iotlb_add_range_ctx(), range size can overflow to 0 when\nstart is 0 and last is ULONG_MAX. One instance where it can happen\nis when userspace sends an IOTLB message with iova=size=uaddr=0\n(vhost_process_iotlb_msg). So, an entry with size = 0, start = 0,\nlast = ULONG_MAX ends up in the iotlb. Next time a packet is sent,\niotlb_access_ok() loops indefinitely due to that erroneous entry.\n\n\tCall Trace:\n\t \n\t iotlb_access_ok+0x21b/0x3e0 drivers/vhost/vhost.c:1340\n\t vq_meta_prefetch+0xbc/0x280 drivers/vhost/vhost.c:1366\n\t vhost_transport_do_send_pkt+0xe0/0xfd0 drivers/vhost/vsock.c:104\n\t vhost_worker+0x23d/0x3d0 drivers/vhost/vhost.c:372\n\t kthread+0x2e9/0x3a0 kernel/kthread.c:377\n\t ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295\n\t \n\nReported by syzbot at:\n\thttps://syzkaller.appspot.com/bug?extid=0abd373e2e50d704db87\n\nTo fix this, do two things:\n\n1. Return -EINVAL in vhost_chr_write_iter() when userspace asks to map\n a range with size 0.\n2. Fix vhost_iotlb_add_range_ctx() to handle the range [0, ULONG_MAX]\n by splitting it into two entries.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-835"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:13Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-g3ch-rx76-35fx/GHSA-g3ch-rx76-35fx.json b/advisories/unreviewed/2024/07/GHSA-g3ch-rx76-35fx/GHSA-g3ch-rx76-35fx.json
new file mode 100644
index 00000000000..67d8570347e
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-g3ch-rx76-35fx/GHSA-g3ch-rx76-35fx.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-g3ch-rx76-35fx",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-6783"
+ ],
+ "details": "A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6783"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.herodevs.com/vulnerability-directory/cve-2024-6783---vue-client-side-xss"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-79"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T15:15:06Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-gfw8-mh94-9w58/GHSA-gfw8-mh94-9w58.json b/advisories/unreviewed/2024/07/GHSA-gfw8-mh94-9w58/GHSA-gfw8-mh94-9w58.json
new file mode 100644
index 00000000000..5b97df83cf9
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-gfw8-mh94-9w58/GHSA-gfw8-mh94-9w58.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-gfw8-mh94-9w58",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-4076"
+ ],
+ "details": "Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure.\nThis issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4076"
+ },
+ {
+ "type": "WEB",
+ "url": "https://kb.isc.org/docs/cve-2024-4076"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T15:15:05Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-h7vj-g26f-rq58/GHSA-h7vj-g26f-rq58.json b/advisories/unreviewed/2024/07/GHSA-h7vj-g26f-rq58/GHSA-h7vj-g26f-rq58.json
new file mode 100644
index 00000000000..81f2276d228
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-h7vj-g26f-rq58/GHSA-h7vj-g26f-rq58.json
@@ -0,0 +1,39 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-h7vj-g26f-rq58",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-41319"
+ ],
+ "details": "TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd function.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41319"
+ },
+ {
+ "type": "WEB",
+ "url": "https://gist.github.com/yanggao017/40efb889800ae2691c38086ebf80c037"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_7_webcmd/README.md"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T15:15:05Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-jq6p-6wg4-wrw8/GHSA-jq6p-6wg4-wrw8.json b/advisories/unreviewed/2024/07/GHSA-jq6p-6wg4-wrw8/GHSA-jq6p-6wg4-wrw8.json
new file mode 100644
index 00000000000..52a6bd237ee
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-jq6p-6wg4-wrw8/GHSA-jq6p-6wg4-wrw8.json
@@ -0,0 +1,35 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-jq6p-6wg4-wrw8",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-40060"
+ ],
+ "details": "go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas() function.",
+ "severity": [
+
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40060"
+ },
+ {
+ "type": "WEB",
+ "url": "https://gist.github.com/F3iG0n9/4d0d7c863eea6874eeeb26a3073aa5f8"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T15:15:04Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-m6fq-wgpr-hqx9/GHSA-m6fq-wgpr-hqx9.json b/advisories/unreviewed/2024/07/GHSA-m6fq-wgpr-hqx9/GHSA-m6fq-wgpr-hqx9.json
new file mode 100644
index 00000000000..469ca5d66c6
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-m6fq-wgpr-hqx9/GHSA-m6fq-wgpr-hqx9.json
@@ -0,0 +1,42 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-m6fq-wgpr-hqx9",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-4080"
+ ],
+ "details": "A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ },
+ {
+ "type": "CVSS_V4",
+ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4080"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-119"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-mr3g-8vqm-6mhq/GHSA-mr3g-8vqm-6mhq.json b/advisories/unreviewed/2024/07/GHSA-mr3g-8vqm-6mhq/GHSA-mr3g-8vqm-6mhq.json
index e9860090a00..7b77c84858a 100644
--- a/advisories/unreviewed/2024/07/GHSA-mr3g-8vqm-6mhq/GHSA-mr3g-8vqm-6mhq.json
+++ b/advisories/unreviewed/2024/07/GHSA-mr3g-8vqm-6mhq/GHSA-mr3g-8vqm-6mhq.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mr3g-8vqm-6mhq",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48863"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmISDN: Fix memory leak in dsp_pipeline_build()\n\ndsp_pipeline_build() allocates dup pointer by kstrdup(cfg),\nbut then it updates dup variable by strsep(&dup, \"|\").\nAs a result when it calls kfree(dup), the dup variable contains NULL.\n\nFound by Linux Driver Verification project (linuxtesting.org) with SVACE.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:13Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-pvw6-xmpp-3h64/GHSA-pvw6-xmpp-3h64.json b/advisories/unreviewed/2024/07/GHSA-pvw6-xmpp-3h64/GHSA-pvw6-xmpp-3h64.json
index 9735726133a..85f2112d589 100644
--- a/advisories/unreviewed/2024/07/GHSA-pvw6-xmpp-3h64/GHSA-pvw6-xmpp-3h64.json
+++ b/advisories/unreviewed/2024/07/GHSA-pvw6-xmpp-3h64/GHSA-pvw6-xmpp-3h64.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pvw6-xmpp-3h64",
- "modified": "2024-07-16T15:30:49Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:49Z",
"aliases": [
"CVE-2022-48854"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: arc_emac: Fix use after free in arc_mdio_probe()\n\nIf bus->state is equal to MDIOBUS_ALLOCATED, mdiobus_free(bus) will free\nthe \"bus\". But bus->name is still used in the next line, which will lead\nto a use after free.\n\nWe can fix it by putting the name in a local variable and make the\nbus->name point to the rodata section \"name\",then use the name in the\nerror message without referring to bus to avoid the uaf.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-416"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:12Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-qc77-c9gc-j3x6/GHSA-qc77-c9gc-j3x6.json b/advisories/unreviewed/2024/07/GHSA-qc77-c9gc-j3x6/GHSA-qc77-c9gc-j3x6.json
index 7e1a13782c4..0e5c8263984 100644
--- a/advisories/unreviewed/2024/07/GHSA-qc77-c9gc-j3x6/GHSA-qc77-c9gc-j3x6.json
+++ b/advisories/unreviewed/2024/07/GHSA-qc77-c9gc-j3x6/GHSA-qc77-c9gc-j3x6.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qc77-c9gc-j3x6",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48860"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nethernet: Fix error handling in xemaclite_of_probe\n\nThis node pointer is returned by of_parse_phandle() with refcount\nincremented in this function. Calling of_node_put() to avoid the\nrefcount leak. As the remove function do.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -53,9 +56,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:12Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-r6gj-cppw-666p/GHSA-r6gj-cppw-666p.json b/advisories/unreviewed/2024/07/GHSA-r6gj-cppw-666p/GHSA-r6gj-cppw-666p.json
index 8dbecc53e89..ec9982240fd 100644
--- a/advisories/unreviewed/2024/07/GHSA-r6gj-cppw-666p/GHSA-r6gj-cppw-666p.json
+++ b/advisories/unreviewed/2024/07/GHSA-r6gj-cppw-666p/GHSA-r6gj-cppw-666p.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r6gj-cppw-666p",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48856"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ngianfar: ethtool: Fix refcount leak in gfar_get_ts_info\n\nThe of_find_compatible_node() function returns a node pointer with\nrefcount incremented, We should use of_node_put() on it when done\nAdd the missing of_node_put() to release the refcount.",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-401"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:12Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-rghf-m847-v399/GHSA-rghf-m847-v399.json b/advisories/unreviewed/2024/07/GHSA-rghf-m847-v399/GHSA-rghf-m847-v399.json
index e4bc18a9a1c..26dc98db4d0 100644
--- a/advisories/unreviewed/2024/07/GHSA-rghf-m847-v399/GHSA-rghf-m847-v399.json
+++ b/advisories/unreviewed/2024/07/GHSA-rghf-m847-v399/GHSA-rghf-m847-v399.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rghf-m847-v399",
- "modified": "2024-07-22T15:32:41Z",
+ "modified": "2024-07-23T15:31:09Z",
"published": "2024-07-22T15:32:41Z",
"aliases": [
"CVE-2024-41320"
@@ -18,6 +18,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41320"
},
+ {
+ "type": "WEB",
+ "url": "https://gist.github.com/yanggao017/081d8638c117e708a4d36783b9230ce5"
+ },
{
"type": "WEB",
"url": "https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_6_get_apcli_conn_info/README.md"
diff --git a/advisories/unreviewed/2024/07/GHSA-v3r3-642v-rqj8/GHSA-v3r3-642v-rqj8.json b/advisories/unreviewed/2024/07/GHSA-v3r3-642v-rqj8/GHSA-v3r3-642v-rqj8.json
new file mode 100644
index 00000000000..f9b6c14bfbe
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-v3r3-642v-rqj8/GHSA-v3r3-642v-rqj8.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-v3r3-642v-rqj8",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-0760"
+ ],
+ "details": "A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. \nThis issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0760"
+ },
+ {
+ "type": "WEB",
+ "url": "https://kb.isc.org/docs/cve-2024-0760"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T15:15:03Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-wg3j-qhc7-22jq/GHSA-wg3j-qhc7-22jq.json b/advisories/unreviewed/2024/07/GHSA-wg3j-qhc7-22jq/GHSA-wg3j-qhc7-22jq.json
new file mode 100644
index 00000000000..6f68b17813d
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-wg3j-qhc7-22jq/GHSA-wg3j-qhc7-22jq.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-wg3j-qhc7-22jq",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-4079"
+ ],
+ "details": "An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4079"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/out-of-bounds-read-due-to-missing-bounds-check-in-labview.html"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-125"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T14:15:14Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2024/07/GHSA-wrch-9585-fw25/GHSA-wrch-9585-fw25.json b/advisories/unreviewed/2024/07/GHSA-wrch-9585-fw25/GHSA-wrch-9585-fw25.json
index 03155329b22..55ab4cdc2b1 100644
--- a/advisories/unreviewed/2024/07/GHSA-wrch-9585-fw25/GHSA-wrch-9585-fw25.json
+++ b/advisories/unreviewed/2024/07/GHSA-wrch-9585-fw25/GHSA-wrch-9585-fw25.json
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wrch-9585-fw25",
- "modified": "2024-07-16T15:30:50Z",
+ "modified": "2024-07-23T15:31:08Z",
"published": "2024-07-16T15:30:50Z",
"aliases": [
"CVE-2022-48857"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: port100: fix use-after-free in port100_send_complete\n\nSyzbot reported UAF in port100_send_complete(). The root case is in\nmissing usb_kill_urb() calls on error handling path of ->probe function.\n\nport100_send_complete() accesses devm allocated memory which will be\nfreed on probe failure. We should kill this urbs before returning an\nerror from probe function to prevent reported use-after-free\n\nFail log:\n\nBUG: KASAN: use-after-free in port100_send_complete+0x16e/0x1a0 drivers/nfc/port100.c:935\nRead of size 1 at addr ffff88801bb59540 by task ksoftirqd/2/26\n...\nCall Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\n print_address_description.constprop.0.cold+0x8d/0x303 mm/kasan/report.c:255\n __kasan_report mm/kasan/report.c:442 [inline]\n kasan_report.cold+0x83/0xdf mm/kasan/report.c:459\n port100_send_complete+0x16e/0x1a0 drivers/nfc/port100.c:935\n __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1670\n\n...\n\nAllocated by task 1255:\n kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38\n kasan_set_track mm/kasan/common.c:45 [inline]\n set_alloc_info mm/kasan/common.c:436 [inline]\n ____kasan_kmalloc mm/kasan/common.c:515 [inline]\n ____kasan_kmalloc mm/kasan/common.c:474 [inline]\n __kasan_kmalloc+0xa6/0xd0 mm/kasan/common.c:524\n alloc_dr drivers/base/devres.c:116 [inline]\n devm_kmalloc+0x96/0x1d0 drivers/base/devres.c:823\n devm_kzalloc include/linux/device.h:209 [inline]\n port100_probe+0x8a/0x1320 drivers/nfc/port100.c:1502\n\nFreed by task 1255:\n kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38\n kasan_set_track+0x21/0x30 mm/kasan/common.c:45\n kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370\n ____kasan_slab_free mm/kasan/common.c:366 [inline]\n ____kasan_slab_free+0xff/0x140 mm/kasan/common.c:328\n kasan_slab_free include/linux/kasan.h:236 [inline]\n __cache_free mm/slab.c:3437 [inline]\n kfree+0xf8/0x2b0 mm/slab.c:3794\n release_nodes+0x112/0x1a0 drivers/base/devres.c:501\n devres_release_all+0x114/0x190 drivers/base/devres.c:530\n really_probe+0x626/0xcc0 drivers/base/dd.c:670",
"severity": [
-
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
],
"affected": [
@@ -53,9 +56,9 @@
],
"database_specific": {
"cwe_ids": [
-
+ "CWE-416"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-16T13:15:12Z"
diff --git a/advisories/unreviewed/2024/07/GHSA-xv2w-3fww-7hvf/GHSA-xv2w-3fww-7hvf.json b/advisories/unreviewed/2024/07/GHSA-xv2w-3fww-7hvf/GHSA-xv2w-3fww-7hvf.json
new file mode 100644
index 00000000000..3f68dfa0a56
--- /dev/null
+++ b/advisories/unreviewed/2024/07/GHSA-xv2w-3fww-7hvf/GHSA-xv2w-3fww-7hvf.json
@@ -0,0 +1,38 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-xv2w-3fww-7hvf",
+ "modified": "2024-07-23T15:31:09Z",
+ "published": "2024-07-23T15:31:09Z",
+ "aliases": [
+ "CVE-2024-1975"
+ ],
+ "details": "If a server hosts a zone containing a \"KEY\" Resource Record, or a resolver DNSSEC-validates a \"KEY\" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests.\nThis issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
+ "affected": [
+
+ ],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1975"
+ },
+ {
+ "type": "WEB",
+ "url": "https://kb.isc.org/docs/cve-2024-1975"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2024-07-23T15:15:03Z"
+ }
+}
\ No newline at end of file