admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2023-10-03 15:00:35 +00:00
parent 25ed9e6dcb
commit 81c45c1e79
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
60 changed files with 953 additions and 226 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

127
2021/1xxx/CVE-2021-1052.json
View File

@ -1,62 +1,67 @@
{
"data_type" : "CVE",
"data_format" : "MITRE",
"data_version" : "4.0",
"CVE_data_meta" : {
"ID" : "CVE-2021-1052",
"ASSIGNER" : "psirt@nvidia.com",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "NVIDIA",
"product" : {
"product_data" : [
{
"product_name" : "NVIDIA GPU Display Driver",
"version" : {
"version_data" : [
{
"version_value" : "All"
}
]
}
}
]
}
}
]
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "denial of service, escalation of privileges, or information disclosure"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"refsource" : "CONFIRM",
"name" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142"
}
]
},
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure."
}
]
}
}
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2021-1052",
"ASSIGNER": "psirt@nvidia.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "NVIDIA",
"product": {
"product_data": [
{
"product_name": "NVIDIA GPU Display Driver",
"version": {
"version_data": [
{
"version_value": "All"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "denial of service, escalation of privileges, or information disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5142"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure."
}
]
}
}

127
2021/1xxx/CVE-2021-1053.json
View File

@ -1,62 +1,67 @@
{
"data_type" : "CVE",
"data_format" : "MITRE",
"data_version" : "4.0",
"CVE_data_meta" : {
"ID" : "CVE-2021-1053",
"ASSIGNER" : "psirt@nvidia.com",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "NVIDIA",
"product" : {
"product_data" : [
{
"product_name" : "NVIDIA GPU Display Driver",
"version" : {
"version_data" : [
{
"version_value" : "All"
}
]
}
}
]
}
}
]
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "denial of service"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"refsource" : "CONFIRM",
"name" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142"
}
]
},
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service."
}
]
}
}
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2021-1053",
"ASSIGNER": "psirt@nvidia.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "NVIDIA",
"product": {
"product_data": [
{
"product_name": "NVIDIA GPU Display Driver",
"version": {
"version_data": [
{
"version_value": "All"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "denial of service"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5142"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service."
}
]
}
}

5
2021/1xxx/CVE-2021-1056.json
View File

@ -53,6 +53,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20220118 [SECURITY] [DLA 2888-1] nvidia-graphics-drivers security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2021/1xxx/CVE-2021-1076.json
View File

@ -80,6 +80,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20220118 [SECURITY] [DLA 2888-1] nvidia-graphics-drivers security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

171
2021/1xxx/CVE-2021-1077.json
View File

@ -1,84 +1,89 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "psirt@nvidia.com",
"ID" : "CVE-2021-1077",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "NVIDIA GPU Display Driver",
"version" : {
"version_data" : [
{
"version_value" : "R450 and R460 driver branch"
}
]
}
}
]
},
"vendor_name" : "NVIDIA"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service."
}
]
},
"generator" : {
"engine" : "Vulnogram 0.0.9"
},
"impact" : {
"cvss" : {
"attackComplexity" : "LOW",
"attackVector" : "LOCAL",
"availabilityImpact" : "HIGH",
"baseScore" : 6.6,
"baseSeverity" : "MEDIUM",
"confidentialityImpact" : "LOW",
"integrityImpact" : "LOW",
"privilegesRequired" : "LOW",
"scope" : "UNCHANGED",
"userInteraction" : "NONE",
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version" : "3.1"
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "denial of service"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
"refsource" : "CONFIRM",
"url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172"
}
]
},
"source" : {
"discovery" : "UNKNOWN"
}
}
"CVE_data_meta": {
"ASSIGNER": "psirt@nvidia.com",
"ID": "CVE-2021-1077",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "NVIDIA GPU Display Driver",
"version": {
"version_data": [
{
"version_value": "R450 and R460 driver branch"
}
]
}
}
]
},
"vendor_name": "NVIDIA"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "denial of service"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
"refsource": "CONFIRM",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5172"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},
"source": {
"discovery": "UNKNOWN"
}
}

5
2021/1xxx/CVE-2021-1090.json
View File

@ -75,6 +75,11 @@
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5211",
"refsource": "CONFIRM",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5211"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2021/1xxx/CVE-2021-1093.json
View File

@ -80,6 +80,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20220118 [SECURITY] [DLA 2888-1] nvidia-graphics-drivers security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2021/1xxx/CVE-2021-1094.json
View File

@ -80,6 +80,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20220118 [SECURITY] [DLA 2888-1] nvidia-graphics-drivers security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2021/1xxx/CVE-2021-1095.json
View File

@ -80,6 +80,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20220118 [SECURITY] [DLA 2888-1] nvidia-graphics-drivers security update",
"url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/21xxx/CVE-2022-21813.json
View File

@ -64,6 +64,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
}

5
2022/21xxx/CVE-2022-21814.json
View File

@ -64,6 +64,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5312"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
}

5
2022/28xxx/CVE-2022-28181.json
View File

@ -64,6 +64,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
}

5
2022/28xxx/CVE-2022-28183.json
View File

@ -64,6 +64,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
}

5
2022/28xxx/CVE-2022-28184.json
View File

@ -64,6 +64,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
}

5
2022/28xxx/CVE-2022-28185.json
View File

@ -64,6 +64,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5353"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
}

5
2022/31xxx/CVE-2022-31607.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/31xxx/CVE-2022-31608.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/31xxx/CVE-2022-31615.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34665.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34666.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5383"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34670.json
View File

@ -46,6 +46,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34673.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34674.json
View File

@ -46,6 +46,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34676.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34677.json
View File

@ -46,6 +46,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34678.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34679.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34680.json
View File

@ -46,6 +46,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34682.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/34xxx/CVE-2022-34684.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42254.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42255.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42256.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42257.json
View File

@ -46,6 +46,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42258.json
View File

@ -46,6 +46,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42259.json
View File

@ -46,6 +46,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230511 [SECURITY] [DLA 3418-1] nvidia-graphics-drivers-legacy-390xx security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00010.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42260.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42261.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42263.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42264.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2022/42xxx/CVE-2022-42265.json
View File

@ -41,6 +41,11 @@
"refsource": "MISC",
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5415"
},
{
"refsource": "GENTOO",
"name": "GLSA-202310-02",
"url": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0180.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0181.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0183.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0184.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0185.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0187.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0188.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0189.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0190.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0191.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0194.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

7
2023/0xxx/CVE-2023-0195.json
View File

@ -11,7 +11,7 @@
"description_data": [
{
"lang": "eng",
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver"
"value": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284,\nwhich may lead to hypothetical Information leak of unimportant data such as local variable data of the driver"
}
]
},
@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0198.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

5
2023/0xxx/CVE-2023-0199.json
View File

@ -58,6 +58,11 @@
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452",
"refsource": "MISC",
"name": "https://nvidia.custhelp.com/app/answers/detail/a_id/5452"
},
{
"url": "https://security.gentoo.org/glsa/202310-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202310-02"
}
]
},

97
2023/4xxx/CVE-2023-4882.json
View File

@ -1,17 +1,106 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-4882",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cve-coordination@incibe.es",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could trigger the args_assets() function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-404 Improper Resource Shutdown or Release",
"cweId": "CWE-404"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Open5GS",
"product": {
"product_data": [
{
"product_name": "Open5GS",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.4.10 and prior"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs",
"refsource": "MISC",
"name": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Open5GS is working on a fix for the reported vulnerabilities.<br>"
}
],
"value": "Open5GS is working on a fix for the reported vulnerabilities.\n"
}
],
"credits": [
{
"lang": "en",
"value": "Pablo Valle Alvear"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
]
}

97
2023/4xxx/CVE-2023-4883.json
View File

@ -1,17 +1,106 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-4883",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cve-coordination@incibe.es",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": " Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF (Virtual Network Function), and triggering the ogs_sbi_message_free function, which could cause a service outage."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-763 Release of Invalid Pointer or Reference",
"cweId": "CWE-763"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Open5GS",
"product": {
"product_data": [
{
"product_name": "Open5GS",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.4.10 and prior"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs",
"refsource": "MISC",
"name": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Open5GS is working on a fix for the reported vulnerabilities.<br>"
}
],
"value": "Open5GS is working on a fix for the reported vulnerabilities.\n"
}
],
"credits": [
{
"lang": "en",
"value": "Pablo Valle Alvear"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
]
}

97
2023/4xxx/CVE-2023-4884.json
View File

@ -1,17 +1,106 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-4884",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cve-coordination@incibe.es",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-306 Missing Authentication for Critical Function",
"cweId": "CWE-306"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Open5GS",
"product": {
"product_data": [
{
"product_name": "Open5GS",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.4.10 and prior"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs",
"refsource": "MISC",
"name": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Open5GS is working on a fix for the reported vulnerabilities."
}
],
"value": "Open5GS is working on a fix for the reported vulnerabilities."
}
],
"credits": [
{
"lang": "en",
"value": "Pablo Valle Alvear"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
}
]
}

97
2023/4xxx/CVE-2023-4885.json
View File

@ -1,17 +1,106 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-4885",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cve-coordination@incibe.es",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-300: Channel Accessible by Non-Endpoint",
"cweId": "CWE-300"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Open5GS",
"product": {
"product_data": [
{
"product_name": "Open5GS",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "2.4.10 and prior"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs",
"refsource": "MISC",
"name": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Open5GS is working on a fix for the reported vulnerabilities."
}
],
"value": "Open5GS is working on a fix for the reported vulnerabilities."
}
],
"credits": [
{
"lang": "en",
"value": "Pablo Valle Alvear"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
}
]
}

104
2023/4xxx/CVE-2023-4886.json
View File

@ -1,17 +1,113 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-4886",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Exposure of Sensitive Information to an Unauthorized Actor",
"cweId": "CWE-200"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "foreman",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"versions": [
{
"version": "3.8.0",
"status": "unaffected"
}
]
}
}
]
}
}
]
}
},
{
"vendor_name": "Red Hat",
"product": {
"product_data": [
{
"product_name": "Red Hat Satellite 6",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"defaultStatus": "affected"
}
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://access.redhat.com/security/cve/CVE-2023-4886",
"refsource": "MISC",
"name": "https://access.redhat.com/security/cve/CVE-2023-4886"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2230135",
"refsource": "MISC",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=2230135"
}
]
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
]
}