Publish Advisories

GHSA-4q63-mr2m-57hf
GHSA-59p2-v62x-gxj8
GHSA-7hmm-wg23-2w7m
GHSA-ffp9-pfq9-g2ww
This commit is contained in:
advisory-database[bot]
2024-07-03 20:14:57 +00:00
parent c0fc75aba9
commit f3ec1d6678
4 changed files with 27 additions and 15 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4q63-mr2m-57hf",
"modified": "2024-05-03T20:15:34Z",
"modified": "2024-07-03T20:12:42Z",
"published": "2024-05-02T18:30:55Z",
"aliases": [
"CVE-2024-33394"
@@ -9,7 +9,10 @@
"summary": "kubevirt allows a local attacker to execute arbitrary code via a crafted command ",
"details": "An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
{
@@ -48,7 +51,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "MODERATE",
"github_reviewed": true,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-59p2-v62x-gxj8",
"modified": "2024-05-06T14:33:14Z",
"modified": "2024-07-03T20:14:20Z",
"published": "2024-05-05T03:30:47Z",
"aliases": [
"CVE-2024-34489"
@@ -9,7 +9,10 @@
"summary": "Ryu Infinite Loop vulnerability",
"details": "`OFPHello` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `length=0`.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
@@ -48,9 +51,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-835"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-05-06T14:33:14Z",
"nvd_published_at": "2024-05-05T03:15:07Z"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7hmm-wg23-2w7m",
"modified": "2024-05-06T14:30:04Z",
"modified": "2024-07-03T20:13:41Z",
"published": "2024-05-05T03:30:47Z",
"aliases": [
"CVE-2024-34483"
@@ -9,7 +9,10 @@
"summary": "Ryu Infinite Loop vulnerability",
"details": "`OFPGroupDescStats` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `OFPBucket.len=0`.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
@@ -48,9 +51,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-05-06T14:30:04Z",
"nvd_published_at": "2024-05-05T02:15:06Z"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ffp9-pfq9-g2ww",
"modified": "2024-05-06T14:32:52Z",
"modified": "2024-07-03T20:14:06Z",
"published": "2024-05-05T03:30:47Z",
"aliases": [
"CVE-2024-34488"
@@ -9,7 +9,10 @@
"summary": "Ryu Infinite Loop vulnerability",
"details": "`OFPMultipartReply` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `b.length=0`.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
@@ -48,9 +51,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-835"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-05-06T14:32:52Z",
"nvd_published_at": "2024-05-05T03:15:07Z"