"-Synchronized-Data."

This commit is contained in:
CVE Team 2021-01-29 17:00:44 +00:00
parent a0287a1a93
commit 87d0ecc70f
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
10 changed files with 217 additions and 6 deletions

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "There is an unsafe incomplete reset of PATH in OpenDoas 6.6 through 6.8 when changing the user context."
"value": "In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed to authenticated user to execute specific commands were not affected by this issue."
}
]
},
@ -61,6 +61,16 @@
"url": "https://github.com/Duncaen/OpenDoas/issues/45",
"refsource": "MISC",
"name": "https://github.com/Duncaen/OpenDoas/issues/45"
},
{
"refsource": "MISC",
"name": "https://github.com/Duncaen/OpenDoas/releases/tag/v6.8.1",
"url": "https://github.com/Duncaen/OpenDoas/releases/tag/v6.8.1"
},
{
"refsource": "MISC",
"name": "https://github.com/Duncaen/OpenDoas/commit/d5acd52e2a15c36a8e06f9103d35622933aa422d",
"url": "https://github.com/Duncaen/OpenDoas/commit/d5acd52e2a15c36a8e06f9103d35622933aa422d"
}
]
}

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/",
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-092/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-092/"
}
]
},

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/",
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-093/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-093/"
}
]
},

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/",
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-094/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-094/"
}
]
},

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/",
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-095/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-095/"
}
]
},

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/",
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-096/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-096/"
}
]
},

View File

@ -48,6 +48,11 @@
"refsource": "MISC",
"name": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/",
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-315-03/"
},
{
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-091/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-091/"
}
]
},

View File

@ -48,12 +48,14 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/SNYK-JS-INIPARSERJS-1065989"
"refsource": "MISC",
"url": "https://snyk.io/vuln/SNYK-JS-INIPARSERJS-1065989",
"name": "https://snyk.io/vuln/SNYK-JS-INIPARSERJS-1065989"
},
{
"refsource": "CONFIRM",
"url": "https://www.npmjs.com/package/iniparserjs"
"refsource": "MISC",
"url": "https://www.npmjs.com/package/iniparserjs",
"name": "https://www.npmjs.com/package/iniparserjs"
}
]
},
@ -61,7 +63,7 @@
"description_data": [
{
"lang": "eng",
"value": "This affects all versions of package iniparserjs.\n This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program. \r\n\r\n"
"value": "This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program."
}
]
},

View File

@ -0,0 +1,72 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-3346",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.turris.com/",
"refsource": "MISC",
"name": "https://www.turris.com/"
},
{
"url": "https://gitlab.nic.cz/turris/foris/foris/-/issues/201",
"refsource": "MISC",
"name": "https://gitlab.nic.cz/turris/foris/foris/-/issues/201"
},
{
"url": "https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst",
"refsource": "MISC",
"name": "https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst"
}
]
}
}

View File

@ -0,0 +1,97 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-3347",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, aka CID-34b1a1ce1458."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c6e60704ab06c1fb1c4a46179c9120",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c6e60704ab06c1fb1c4a46179c9120"
},
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce1458f50ef27c54e28eb9b1947012907a",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce1458f50ef27c54e28eb9b1947012907a"
},
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2dac39d93987f7de1e20b3988c8685523247ae2",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2dac39d93987f7de1e20b3988c8685523247ae2"
},
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6ccc84f917d33312eb2846bd7b567639f585ad6d",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6ccc84f917d33312eb2846bd7b567639f585ad6d"
},
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2156ac1934166d6deb6cd0f6ffc4c1076ec63697"
},
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5cade200ab9a2a3be9e7f32a752c8d86b502ec7"
},
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c55201f02ffd675e1231d731365e335c307",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c55201f02ffd675e1231d731365e335c307"
},
{
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
"refsource": "MISC",
"name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9"
}
]
}
}