"-Synchronized-Data."

This commit is contained in:
CVE Team 2020-06-10 20:01:31 +00:00
parent a27da3fdca
commit 2395039923
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
39 changed files with 381 additions and 16 deletions

View File

@ -81,6 +81,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -81,6 +81,16 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
}

View File

@ -101,6 +101,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -71,6 +71,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -66,6 +66,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -53,6 +53,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
},

View File

@ -111,6 +111,11 @@
"refsource": "MISC",
"name": "http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html",
"url": "http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
},

View File

@ -103,6 +103,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
},

View File

@ -4,14 +4,58 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-10705",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Undertow",
"version": {
"version_data": [
{
"version_value": "Versions before Undertow 2.1.1.Final."
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Uncontrolled Resource Consumption"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1803241",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1803241"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the \"Expect: 100-continue\" header may cause an out of memory error. This flaw may potentially lead to a denial of service."
}
]
}

View File

@ -63,6 +63,16 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
},

View File

@ -83,6 +83,16 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
},

View File

@ -63,6 +63,16 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
},

View File

@ -121,6 +121,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -101,6 +101,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -106,6 +106,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -106,6 +106,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -106,6 +106,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -1,17 +1,66 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-11622",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2020-11622",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability exists in Arista\u2019s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368.*, 4.21.4-FCRFX.*, 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1 Router code in a scenario where TCP MSS options are configured."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.arista.com/en/support/advisories-notices",
"refsource": "MISC",
"name": "https://www.arista.com/en/support/advisories-notices"
},
{
"refsource": "CONFIRM",
"name": "https://www.arista.com/en/support/advisories-notices/security-advisories/11195-security-advisory-49",
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/11195-security-advisory-49"
}
]
}

View File

@ -96,6 +96,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200530 [SECURITY] [DLA 2223-1] salt security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00027.html"
},
{
"refsource": "MISC",
"name": "http://support.blackberry.com/kb/articleDetail?articleNumber=000063758",
"url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000063758"
}
]
}

View File

@ -106,6 +106,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -76,6 +76,16 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
}

View File

@ -96,6 +96,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -86,6 +86,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -91,6 +91,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -91,6 +91,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://bugzilla.suse.com/show_bug.cgi?id=1171736#c3",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1171736#c3"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
}

View File

@ -96,6 +96,16 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
}

View File

@ -81,6 +81,16 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
},
{
"refsource": "DEBIAN",
"name": "DSA-4699",
"url": "https://www.debian.org/security/2020/dsa-4699"
}
]
}

View File

@ -1,17 +1,66 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-13238",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2020-13238",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-001_en.pdf",
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-001_en.pdf"
},
{
"refsource": "MISC",
"name": "http://jvn.jp/vu/JVNVU97662844/index.html",
"url": "http://jvn.jp/vu/JVNVU97662844/index.html"
}
]
}

View File

@ -52,6 +52,11 @@
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5",
"url": "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5"
},
{
"url": "https://github.com/roundcube/roundcubemail/commit/37e2bc745723ef6322f0f785aefd0b9313a40f19",
"refsource": "MISC",

View File

@ -52,6 +52,11 @@
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5",
"url": "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5"
},
{
"url": "https://github.com/roundcube/roundcubemail/releases/tag/1.3.12",
"refsource": "MISC",

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-14013",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -128,6 +128,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper.\n\nUploading a specially crafted file to an affected version allows arbitrary code execution (discovered, tested, and confirmed by myself), so the risk factor should be regarded as very high. Newer phpMussel versions don't use PHP's phar wrapper, and are therefore unaffected.\n\nThis has been fixed in version 1.6.0."
"value": "phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution (discovered, tested, and confirmed by myself), so the risk factor should be regarded as very high. Newer phpMussel versions don't use PHP's phar wrapper, and are therefore unaffected. This has been fixed in version 1.6.0."
}
]
},

View File

@ -126,6 +126,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
},

View File

@ -76,6 +76,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -96,6 +96,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -76,6 +76,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}

View File

@ -101,6 +101,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
},
{
"refsource": "DEBIAN",
"name": "DSA-4698",
"url": "https://www.debian.org/security/2020/dsa-4698"
}
]
}