diff --git a/2019/10xxx/CVE-2019-10197.json b/2019/10xxx/CVE-2019-10197.json index 8344d08aa8d..1c698800085 100644 --- a/2019/10xxx/CVE-2019-10197.json +++ b/2019/10xxx/CVE-2019-10197.json @@ -69,6 +69,16 @@ "refsource": "UBUNTU", "name": "USN-4121-1", "url": "https://usn.ubuntu.com/4121-1/" + }, + { + "refsource": "BUGTRAQ", + "name": "20190904 [SECURITY] [DSA 4513-1] samba security update", + "url": "https://seclists.org/bugtraq/2019/Sep/4" + }, + { + "refsource": "DEBIAN", + "name": "DSA-4513", + "url": "https://www.debian.org/security/2019/dsa-4513" } ] }, diff --git a/2019/10xxx/CVE-2019-10709.json b/2019/10xxx/CVE-2019-10709.json index 8fd84c368ac..b090c375076 100644 --- a/2019/10xxx/CVE-2019-10709.json +++ b/2019/10xxx/CVE-2019-10709.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2019-10709", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2019-10709", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\\\.\\AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "name": "https://blog.telspace.co.za/2019/08/tsa-2019-001-asus-precision-touchpad.html", + "url": "https://blog.telspace.co.za/2019/08/tsa-2019-001-asus-precision-touchpad.html" + }, + { + "refsource": "MISC", + "name": "http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.html", + "url": "http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.html" } ] } diff --git a/2019/12xxx/CVE-2019-12587.json b/2019/12xxx/CVE-2019-12587.json index b75c8d59c39..7e173151479 100644 --- a/2019/12xxx/CVE-2019-12587.json +++ b/2019/12xxx/CVE-2019-12587.json @@ -1,17 +1,71 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2019-12587", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2019-12587", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/espressif", + "refsource": "MISC", + "name": "https://github.com/espressif" + }, + { + "refsource": "MISC", + "name": "https://github.com/Matheus-Garbelini/esp32_esp8266_attacks", + "url": "https://github.com/Matheus-Garbelini/esp32_esp8266_attacks" + }, + { + "refsource": "MISC", + "name": "https://matheus-garbelini.github.io/home/post/zero-pmk-installation/", + "url": "https://matheus-garbelini.github.io/home/post/zero-pmk-installation/" } ] } diff --git a/2019/12xxx/CVE-2019-12588.json b/2019/12xxx/CVE-2019-12588.json index bc8fb469b7f..c06bc5d4886 100644 --- a/2019/12xxx/CVE-2019-12588.json +++ b/2019/12xxx/CVE-2019-12588.json @@ -1,17 +1,71 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2019-12588", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2019-12588", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/espressif", + "refsource": "MISC", + "name": "https://github.com/espressif" + }, + { + "refsource": "MISC", + "name": "https://github.com/Matheus-Garbelini/esp32_esp8266_attacks", + "url": "https://github.com/Matheus-Garbelini/esp32_esp8266_attacks" + }, + { + "refsource": "MISC", + "name": "https://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/", + "url": "https://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/" } ] } diff --git a/2019/15xxx/CVE-2019-15718.json b/2019/15xxx/CVE-2019-15718.json new file mode 100644 index 00000000000..f30880854ae --- /dev/null +++ b/2019/15xxx/CVE-2019-15718.json @@ -0,0 +1,67 @@ +{ + "CVE_data_meta": { + "ASSIGNER": "cve@mitre.org", + "ID": "CVE-2019-15718", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1746057", + "refsource": "MISC", + "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1746057" + }, + { + "refsource": "MISC", + "name": "http://www.openwall.com/lists/oss-security/2019/09/03/1", + "url": "http://www.openwall.com/lists/oss-security/2019/09/03/1" + } + ] + } +} \ No newline at end of file diff --git a/2019/15xxx/CVE-2019-15858.json b/2019/15xxx/CVE-2019-15858.json index 3d99915755d..d6b0282905c 100644 --- a/2019/15xxx/CVE-2019-15858.json +++ b/2019/15xxx/CVE-2019-15858.json @@ -52,6 +52,11 @@ }, "references": { "reference_data": [ + { + "refsource": "MISC", + "name": "https://wpvulndb.com/vulnerabilities/9490", + "url": "https://wpvulndb.com/vulnerabilities/9490" + }, { "url": "https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-woody-ad-snippets-plugin-lead-to-remote-code-execution/", "refsource": "MISC", diff --git a/2019/15xxx/CVE-2019-15892.json b/2019/15xxx/CVE-2019-15892.json index 4944fd3180d..18ae59fa52b 100644 --- a/2019/15xxx/CVE-2019-15892.json +++ b/2019/15xxx/CVE-2019-15892.json @@ -56,6 +56,11 @@ "url": "https://varnish-cache.org/security/VSV00003.html", "refsource": "MISC", "name": "https://varnish-cache.org/security/VSV00003.html" + }, + { + "refsource": "BUGTRAQ", + "name": "20190904 [SECURITY] [DSA 4514-1] varnish security update", + "url": "https://seclists.org/bugtraq/2019/Sep/5" } ] }