Auto-Update: 2024-12-10T23:00:30.405237+00:00

fkie-cad · Dec 10, 2024 · 9b15234 · 9b15234
1 parent 8286a3e
commit 9b15234
Show file tree

Hide file tree

Showing 177 changed files with 12,424 additions and 275 deletions.
diff --git a/CVE-2021/CVE-2021-470xx/CVE-2021-47077.json b/CVE-2021/CVE-2021-470xx/CVE-2021-47077.json
@@ -2,8 +2,8 @@
   "id": "CVE-2021-47077",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-03-01T22:15:47.283",
-  "lastModified": "2024-11-21T06:35:21.220",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-12-10T21:01:51.030",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -15,31 +15,120 @@
       "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: qedf: Agregar comprobaciones de puntero en qedf_update_link_speed() Se observ\u00f3 el siguiente seguimiento: [ 14.042059] Seguimiento de llamadas: [ 14.042061]  [ 14.042068] qedf_link_update+0x144/0x1f0 [ qedf] [14.042117] qed_link_update+0x5c/0x80 [qed] [14.042135] qed_mcp_handle_link_change+0x2d2/0x410 [qed] [14.042155]? qed_set_ptt+0x70/0x80 [qed] [14.042170]? qed_set_ptt+0x70/0x80 [qed] [14.042186]? qed_rd+0x13/0x40 [qed] [ 14.042205] qed_mcp_handle_events+0x437/0x690 [qed] [ 14.042221] ? qed_set_ptt+0x70/0x80 [qed] [ 14.042239] qed_int_sp_dpc+0x3a6/0x3e0 [qed] [ 14.042245] tasklet_action_common.isra.14+0x5a/0x100 [ 14.042250] __do_softirq+0xe4/0x2f8 [ 14.042253] salida_irq+0xf7/0x100 [ 14.042255] do_IRQ+0x7f/0xd0 [ 14.042257] common_interrupt+0xf/0xf [ 14.042259]  API qedf_link_update() est\u00e1 siendo llamada desde QED pero en ese momento shost_data no est\u00e1 inicializado. Esto da como resultado una desreferencia del puntero NULL cuando intentamos desreferenciar shost_data mientras actualizamos las velocidades_compatibles. Agregue una verificaci\u00f3n de puntero NULL antes de eliminar la referencia a shost_data."
     }
   ],
-  "metrics": {},
+  "metrics": {
+    "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 5.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 3.6
+      }
+    ]
+  },
+  "weaknesses": [
+    {
+      "source": "[email protected]",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-476"
+        }
+      ]
+    }
+  ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "4.11",
+              "versionEndExcluding": "5.10.40",
+              "matchCriteriaId": "2AAEF84B-9EDC-4A9E-9CED-005FB1D87316"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "5.11",
+              "versionEndExcluding": "5.12.7",
+              "matchCriteriaId": "E8F2CE30-38B0-4716-B12B-A139B0F9C5C9"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*",
+              "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*",
+              "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://git.kernel.org/stable/c/11014efcec378bb0050a6cf08eaf375e3693400a",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/73578af92a0fae6609b955fcc9113e50e413c80f",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/a6362a737572f66051deb7637f3f77ddf7a4402f",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/11014efcec378bb0050a6cf08eaf375e3693400a",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/73578af92a0fae6609b955fcc9113e50e413c80f",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/a6362a737572f66051deb7637f3f77ddf7a4402f",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Patch"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-363xx/CVE-2023-36358.json b/CVE-2023/CVE-2023-363xx/CVE-2023-36358.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-36358",
   "sourceIdentifier": "[email protected]",
   "published": "2023-06-22T20:15:09.873",
-  "lastModified": "2024-11-21T08:09:35.597",
+  "lastModified": "2024-12-10T22:15:05.393",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.1,
         "impactScore": 4.0
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
+          "baseScore": 7.7,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "CHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.1,
+        "impactScore": 4.0
       }
     ]
   },
@@ -45,6 +65,16 @@
           "value": "CWE-120"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-120"
+        }
+      ]
     }
   ],
   "configurations": [

diff --git a/CVE-2023/CVE-2023-363xx/CVE-2023-36359.json b/CVE-2023/CVE-2023-363xx/CVE-2023-36359.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-36359",
   "sourceIdentifier": "[email protected]",
   "published": "2023-06-22T20:15:09.920",
-  "lastModified": "2024-11-21T08:09:35.760",
+  "lastModified": "2024-12-10T21:15:14.750",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -32,6 +32,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },
@@ -45,6 +65,16 @@
           "value": "CWE-120"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-120"
+        }
+      ]
     }
   ],
   "configurations": [
@@ -254,6 +284,14 @@
         "Exploit",
         "Third Party Advisory"
       ]
+    },
+    {
+      "url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md",
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "tags": [
+        "Exploit",
+        "Third Party Advisory"
+      ]
     }
   ]
 }