mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
"-Synchronized-Data."
This commit is contained in:
CVE Team
parent
1aa3ba4e50
commit
d4538ca2e2
@ -1,17 +1,61 @@
|
||||
{
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2024-34198",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"ID": "CVE-2024-34198",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "n/a",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE",
|
||||
"data_version": "4.0",
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlan_ssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long value for the wlan_ssid field, leading to a stack overflow. This can be further exploited to execute arbitrary commands or launch denial-of-service attacks."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "n/a"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://gist.github.com/Swind1er/02f6cb414e440c34878f20fef756e286",
|
||||
"refsource": "MISC",
|
||||
"name": "https://gist.github.com/Swind1er/02f6cb414e440c34878f20fef756e286"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -56,6 +56,11 @@
|
||||
"refsource": "CONFIRM",
|
||||
"name": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35325.c",
|
||||
"url": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35325.c"
|
||||
},
|
||||
{
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/idhyt/pocs/tree/main/libyaml",
|
||||
"url": "https://github.com/idhyt/pocs/tree/main/libyaml"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -34,7 +34,7 @@
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "libyaml v0.2.5 is vulnerable to Buffer Overflow. Affected by this issue is the function yaml_emitter_emit of the file /src/libyaml/src/emitter.c. The manipulation leads to a double-free."
|
||||
"value": "** DISPUTED ** libyaml v0.2.5 is vulnerable to Buffer Overflow. Affected by this issue is the function yaml_emitter_emit of the file /src/libyaml/src/emitter.c. The manipulation leads to a double-free. NOTE: this is disputed by the supplier because the discoverer's sample C code is incorrect: it does not call all of the required _initialize functions that are described in the LibYAML documentation."
|
||||
}
|
||||
]
|
||||
},
|
||||
@ -56,6 +56,21 @@
|
||||
"refsource": "CONFIRM",
|
||||
"name": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35326.c",
|
||||
"url": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35326.c"
|
||||
},
|
||||
{
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/idhyt/pocs/tree/main/libyaml",
|
||||
"url": "https://github.com/idhyt/pocs/tree/main/libyaml"
|
||||
},
|
||||
{
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/yaml/libyaml/issues/298",
|
||||
"url": "https://github.com/yaml/libyaml/issues/298"
|
||||
},
|
||||
{
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/yaml/libyaml/issues/302",
|
||||
"url": "https://github.com/yaml/libyaml/issues/302"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -34,7 +34,7 @@
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "libyaml v0.2.5 is vulnerable to DDOS. Affected by this issue is the function yaml_parser_parse of the file /src/libyaml/src/parser.c."
|
||||
"value": "** DISPUTED ** libyaml v0.2.5 is vulnerable to a denial of service. Affected by this issue is the function yaml_parser_parse of the file /src/libyaml/src/parser.c. NOTE: this is disputed by the supplier because the discoverer's sample C code is incorrect: it does not call required _initialize functions that are described in the LibYAML documentation."
|
||||
}
|
||||
]
|
||||
},
|
||||
@ -56,6 +56,11 @@
|
||||
"refsource": "CONFIRM",
|
||||
"name": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35328.c",
|
||||
"url": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35328.c"
|
||||
},
|
||||
{
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/idhyt/pocs/tree/main/libyaml",
|
||||
"url": "https://github.com/idhyt/pocs/tree/main/libyaml"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -65,7 +65,7 @@
|
||||
"x_cve_json_5_version_data": {
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:1.26.5-18.2.rhaos4.13.git2e90133.el8",
|
||||
"version": "0:1.26.5-18.2.rhaos4.13.git2e90133.el9",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
@ -107,7 +107,7 @@
|
||||
"x_cve_json_5_version_data": {
|
||||
"versions": [
|
||||
{
|
||||
"version": "0:1.28.7-2.rhaos4.15.git111aec5.el8",
|
||||
"version": "0:1.28.7-2.rhaos4.15.git111aec5.el9",
|
||||
"lessThan": "*",
|
||||
"versionType": "rpm",
|
||||
"status": "unaffected"
|
||||
|
||||
@ -89,6 +89,11 @@
|
||||
"url": "https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/python/cpython/issues/123270",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/python/cpython/issues/123270"
|
||||
}
|
||||
]
|
||||
},
|
||||
@ -107,23 +112,5 @@
|
||||
"lang": "en",
|
||||
"value": "Seth Larson"
|
||||
}
|
||||
],
|
||||
"impact": {
|
||||
"cvss": [
|
||||
{
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"version": "3.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
Loading…
x
Reference in New Issue
Block a user