admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-29 05:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Submitting published CVEs

Browse Source
This commit is contained in:
Cisco Talos CNA 2022-10-07 13:42:31 -04:00
parent 99887ef358
commit d305d818f1
5 changed files with 67 additions and 47 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

104
2020/13xxx/CVE-2020-13498.json
View File

@ -1,44 +1,18 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-13498",
"ASSIGNER": "talos-cna@cisco.com",
"STATE": "PUBLIC"
"STATE": "PUBLIC",
"DATE_PUBLIC": "2020-11-12",
"ASSIGNER": "talos-cna@cisco.com"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Pixar",
"version": {
"version_data": [
{
"version_value": "Pixar OpenUSD 20.05, Apple macOS Catalina 10.15.3"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
"description": {
"description_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer"
}
]
"lang": "eng",
"value": "An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file."
}
]
},
@ -51,14 +25,6 @@
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in SdfPath Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file."
}
]
},
"impact": {
"cvss": {
"baseScore": 4.3,
@ -66,5 +32,59 @@
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-125: Out-of-bounds Read"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Apple",
"product": {
"product_data": [
{
"product_name": "macOS",
"version": {
"version_data": [
{
"version_value": "Catalina 10.15.3",
"version_affected": "="
}
]
}
}
]
}
},
{
"vendor_name": "Pixar",
"product": {
"product_data": [
{
"product_name": "OpenUSD",
"version": {
"version_data": [
{
"version_value": "20.05",
"version_affected": "="
}
]
}
}
]
}
}
]
}
}
}

4
2022/26xxx/CVE-2022-26376.json
View File

@ -12,7 +12,7 @@
"description_data": [
{
"lang": "eng",
"value": "A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability."
"value": "A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability."
}
]
},
@ -39,7 +39,7 @@
"description": [
{
"lang": "eng",
"value": "CWE-20: Improper Input Validation"
"value": "CWE-787: Out-of-bounds Write"
}
]
}

2
2022/27xxx/CVE-2022-27631.json
View File

@ -39,7 +39,7 @@
"description": [
{
"lang": "eng",
"value": "CWE-20: Improper Input Validation"
"value": "CWE-787: Out-of-bounds Write"
}
]
}

2
2022/28xxx/CVE-2022-28664.json
View File

@ -39,7 +39,7 @@
"description": [
{
"lang": "eng",
"value": "CWE-20: Improper Input Validation"
"value": "CWE-787: Out-of-bounds Write"
}
]
}

2
2022/28xxx/CVE-2022-28665.json
View File

@ -39,7 +39,7 @@
"description": [
{
"lang": "eng",
"value": "CWE-20: Improper Input Validation"
"value": "CWE-787: Out-of-bounds Write"
}
]
}