Auto-Update: 2024-09-05T18:00:18.857841+00:00

fkie-cad · Sep 5, 2024 · faf53ba · faf53ba
1 parent 42e3834
commit faf53ba
Show file tree

Hide file tree

Showing 116 changed files with 6,113 additions and 600 deletions.
diff --git a/CVE-2020/CVE-2020-256xx/CVE-2020-25659.json b/CVE-2020/CVE-2020-256xx/CVE-2020-25659.json
@@ -2,8 +2,8 @@
   "id": "CVE-2020-25659",
   "sourceIdentifier": "[email protected]",
   "published": "2021-01-11T16:15:15.040",
-  "lastModified": "2023-02-09T02:25:50.887",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2024-09-05T16:10:54.837",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {
@@ -95,8 +95,8 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:python-cryptography_project:python-cryptography:3.2:*:*:*:*:*:*:*",
-              "matchCriteriaId": "3140ADD7-95CF-4087-8E09-BF6EC4836E7C"
+              "criteria": "cpe:2.3:a:cryptography.io:cryptography:3.2:*:*:*:*:*:*:*",
+              "matchCriteriaId": "4A8D52B0-326F-479B-A3F2-6BA7333256FD"
             }
           ]
         }

diff --git a/CVE-2020/CVE-2020-362xx/CVE-2020-36242.json b/CVE-2020/CVE-2020-362xx/CVE-2020-36242.json
@@ -2,7 +2,7 @@
   "id": "CVE-2020-36242",
   "sourceIdentifier": "[email protected]",
   "published": "2021-02-07T20:15:12.090",
-  "lastModified": "2023-11-07T03:22:08.227",
+  "lastModified": "2024-09-05T16:09:10.430",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -89,9 +89,9 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:cryptography_project:cryptography:*:*:*:*:*:python:*:*",
+              "criteria": "cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*",
               "versionEndExcluding": "3.3.2",
-              "matchCriteriaId": "C0951FE7-BCCA-4ACB-B773-B6EF1C17AF5B"
+              "matchCriteriaId": "CA823DED-BFFE-4DBC-878D-5316EE987208"
             }
           ]
         }

diff --git a/CVE-2022/CVE-2022-458xx/CVE-2022-45805.json b/CVE-2022/CVE-2022-458xx/CVE-2022-45805.json
@@ -2,8 +2,8 @@
   "id": "CVE-2022-45805",
   "sourceIdentifier": "[email protected]",
   "published": "2023-11-03T13:15:08.227",
-  "lastModified": "2023-11-09T19:17:27.470",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2024-09-05T16:35:01.640",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },

diff --git a/CVE-2022/CVE-2022-475xx/CVE-2022-47588.json b/CVE-2022/CVE-2022-475xx/CVE-2022-47588.json
@@ -2,8 +2,8 @@
   "id": "CVE-2022-47588",
   "sourceIdentifier": "[email protected]",
   "published": "2023-11-03T12:15:08.490",
-  "lastModified": "2023-11-13T18:29:39.327",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2024-09-05T16:35:02.347",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },

diff --git a/CVE-2022/CVE-2022-488xx/CVE-2022-48877.json b/CVE-2022/CVE-2022-488xx/CVE-2022-48877.json
@@ -2,8 +2,8 @@
   "id": "CVE-2022-48877",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-08-21T07:15:04.563",
-  "lastModified": "2024-08-21T12:30:33.697",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-09-05T17:47:28.647",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -15,35 +15,144 @@
       "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: evitemos el p\u00e1nico si no se crea extend_tree. Este parche evita el siguiente p\u00e1nico. pc: __lookup_extent_tree+0xd8/0x760 lr: f2fs_do_write_data_page+0x104/0x87c sp: ffffffc010cbb3c0 x29: ffffffc010cbb3e0 x28: 0000000000000000 x27: ffffff8803e7f020 : ffffff8803e7ed40 x25: ffffff8803e7f020 x24: ffffffc010cbb460 x23: ffffffc010cbb480 x22: 0000000000000000 x21: 0000000000000000 x20: ffffffff22e9090 0x19: 0000000000000000 x18: ffffffc010c5d080 x17: 0000000000000000 x16: 0000000000000020 x15: ffffffdb1acdbb88 x14: ffffff888759e2b0 x13: 0000000000000000 x12: 02da49000 x11: 000000000a001200 x10: ffffff8803e7ed40 x9: ffffff8023195800 x8: ffffff802da49078 x7: 0000000000000001 x6: 0000000000000000 x5 000000000000006 x4: ffffffc010cbba28 x3: 0000000000000000 x2: ffffffc010cbb480 x1: 0000000000000000 x0: ffffff8803e7ed40 Rastreo de llamadas: __lookup_extent_tree+0xd8/0x760 f2fs_do_write_data_page+0x104/0x87c f2fs_write_single_data_page+0x420/0xb60 f 2fs_write_cache_pages+0x418/0xb1c __f2fs_write_data_pages+0x428/0x58c f2fs_write_data_pages+0x30/0x40 do_writepages+0x88/0x190 __writeback_single_inode+0x48/0x448 writeback_sb_inodes+0x468/0x9e8 __writeback_inodes_wb+0xb8/0x2a4 wb_writeback+0x33c/0x740 wb_do_writeback+0x2b4/0x400 wb_workfn+0xe4/0x34c Process_one_work+0x24c/0x5bc trabajador_thread+0x3e8/0xa 50 khilo+0x150/0x1b4"
     }
   ],
-  "metrics": {},
+  "metrics": {
+    "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH",
+          "baseScore": 5.5,
+          "baseSeverity": "MEDIUM"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 3.6
+      }
+    ]
+  },
+  "weaknesses": [
+    {
+      "source": "[email protected]",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "NVD-CWE-noinfo"
+        }
+      ]
+    }
+  ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "4.14.304",
+              "matchCriteriaId": "E8A9B982-D3D6-49CA-BF0A-196ED7947B3A"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "4.15",
+              "versionEndExcluding": "4.19.271",
+              "matchCriteriaId": "D86DA289-B5BC-4629-BD56-AB453D481393"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "4.20",
+              "versionEndExcluding": "5.4.230",
+              "matchCriteriaId": "9DB7398D-9781-49C5-B2AE-1969B694B614"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "5.5",
+              "versionEndExcluding": "5.10.165",
+              "matchCriteriaId": "C6002D5B-9B6A-4788-B943-E3EE01E01303"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "5.11",
+              "versionEndExcluding": "5.15.90",
+              "matchCriteriaId": "E995CDA5-7223-4FDB-BAD3-81B22C763A43"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "5.16",
+              "versionEndExcluding": "6.1.8",
+              "matchCriteriaId": "A6AFE6C9-3F59-4711-B2CF-7D6682FF6BD0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://git.kernel.org/stable/c/1c38cdc747f00daf7394535eae5afc4c503c59bb",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/2c129e868992621a739bdd57a5bffa3985ef1b91",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/557e85ff9afef6d45020b6f09357111d38033c31",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/72009139a661ade5cb1da4239734ed02fa1cfff0",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/dd83a9763e29ed7a21c8a43f7a62cd0a6bf74692",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/df9d44b645b83fffccfb4e28c1f93376585fdec8",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://git.kernel.org/stable/c/ff85a1dbd90d29f73033177ff8d8de4a27d9721c",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+      "tags": [
+        "Patch"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-207xx/CVE-2023-20702.json b/CVE-2023/CVE-2023-207xx/CVE-2023-20702.json
@@ -2,8 +2,8 @@
   "id": "CVE-2023-20702",
   "sourceIdentifier": "[email protected]",
   "published": "2023-11-06T04:15:07.653",
-  "lastModified": "2023-11-13T18:48:09.407",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2024-09-05T16:35:02.980",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },

diff --git a/CVE-2023/CVE-2023-239xx/CVE-2023-23931.json b/CVE-2023/CVE-2023-239xx/CVE-2023-23931.json
@@ -2,7 +2,7 @@
   "id": "CVE-2023-23931",
   "sourceIdentifier": "[email protected]",
   "published": "2023-02-07T21:15:09.850",
-  "lastModified": "2023-02-16T16:57:18.890",
+  "lastModified": "2024-09-05T16:09:10.430",
   "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
@@ -76,10 +76,10 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:cryptography_project:cryptography:*:*:*:*:*:python:*:*",
+              "criteria": "cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*",
               "versionStartIncluding": "1.8",
               "versionEndExcluding": "39.0.1",
-              "matchCriteriaId": "35C254EF-097A-4C4B-A36F-C512D1565900"
+              "matchCriteriaId": "D620CB15-986D-4955-BCE9-5CC459F01289"
             }
           ]
         }

diff --git a/CVE-2023/CVE-2023-287xx/CVE-2023-28748.json b/CVE-2023/CVE-2023-287xx/CVE-2023-28748.json
@@ -2,8 +2,8 @@
   "id": "CVE-2023-28748",
   "sourceIdentifier": "[email protected]",
   "published": "2023-11-06T09:15:07.790",
-  "lastModified": "2023-11-10T04:19:54.407",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2024-09-05T16:35:04.003",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },