From f18656edc890c63a6c8a3ee852f7c52bf8299f9b Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 13 Jun 2018 10:33:09 -0400 Subject: [PATCH 1/2] Adding CVE-2018-3759 for Hackerone. --- 2018/3xxx/CVE-2018-3759.json | 49 +++++++++++++++++++++++++++++++++--- 1 file changed, 46 insertions(+), 3 deletions(-) diff --git a/2018/3xxx/CVE-2018-3759.json b/2018/3xxx/CVE-2018-3759.json index 6faf48ec38c..204c493c4be 100644 --- a/2018/3xxx/CVE-2018-3759.json +++ b/2018/3xxx/CVE-2018-3759.json @@ -1,8 +1,32 @@ { "CVE_data_meta" : { - "ASSIGNER" : "cve@mitre.org", + "ASSIGNER" : "support@hackerone.com", + "DATE_PUBLIC" : "2018-05-03T00:00:00", "ID" : "CVE-2018-3759", - "STATE" : "RESERVED" + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "private_address_check ruby gem", + "version" : { + "version_data" : [ + { + "version_value" : "0.5.0" + } + ] + } + } + ] + }, + "vendor_name" : "HackerOne" + } + ] + } }, "data_format" : "MITRE", "data_type" : "CVE", @@ -11,7 +35,26 @@ "description_data" : [ { "lang" : "eng", - "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value" : "private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being checked. DNS entries with a TTL of 0 can trigger this case where the initial resolution is a public address by the subsequent resolution is a private address." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CWE-362)" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "url" : "https://github.com/jtdowney/private_address_check/commit/4068228187db87fea7577f7020099399772bb147" } ] } From ec57b9017a95d30440e26ffd14509f5be938251e Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 13 Jun 2018 11:04:12 -0400 Subject: [PATCH 2/2] - Synchronized data. --- 2018/12xxx/CVE-2018-12295.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12296.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12297.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12298.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12299.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12300.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12301.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12302.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12303.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12304.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12305.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12306.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12307.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12308.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12309.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12310.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12311.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12312.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12313.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12314.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12315.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12316.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12317.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12318.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12319.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12320.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12321.json | 18 ++++++++++++++++++ 2018/12xxx/CVE-2018-12322.json | 18 ++++++++++++++++++ 2018/3xxx/CVE-2018-3759.json | 4 +++- 29 files changed, 507 insertions(+), 1 deletion(-) create mode 100644 2018/12xxx/CVE-2018-12295.json create mode 100644 2018/12xxx/CVE-2018-12296.json create mode 100644 2018/12xxx/CVE-2018-12297.json create mode 100644 2018/12xxx/CVE-2018-12298.json create mode 100644 2018/12xxx/CVE-2018-12299.json create mode 100644 2018/12xxx/CVE-2018-12300.json create mode 100644 2018/12xxx/CVE-2018-12301.json create mode 100644 2018/12xxx/CVE-2018-12302.json create mode 100644 2018/12xxx/CVE-2018-12303.json create mode 100644 2018/12xxx/CVE-2018-12304.json create mode 100644 2018/12xxx/CVE-2018-12305.json create mode 100644 2018/12xxx/CVE-2018-12306.json create mode 100644 2018/12xxx/CVE-2018-12307.json create mode 100644 2018/12xxx/CVE-2018-12308.json create mode 100644 2018/12xxx/CVE-2018-12309.json create mode 100644 2018/12xxx/CVE-2018-12310.json create mode 100644 2018/12xxx/CVE-2018-12311.json create mode 100644 2018/12xxx/CVE-2018-12312.json create mode 100644 2018/12xxx/CVE-2018-12313.json create mode 100644 2018/12xxx/CVE-2018-12314.json create mode 100644 2018/12xxx/CVE-2018-12315.json create mode 100644 2018/12xxx/CVE-2018-12316.json create mode 100644 2018/12xxx/CVE-2018-12317.json create mode 100644 2018/12xxx/CVE-2018-12318.json create mode 100644 2018/12xxx/CVE-2018-12319.json create mode 100644 2018/12xxx/CVE-2018-12320.json create mode 100644 2018/12xxx/CVE-2018-12321.json create mode 100644 2018/12xxx/CVE-2018-12322.json diff --git a/2018/12xxx/CVE-2018-12295.json b/2018/12xxx/CVE-2018-12295.json new file mode 100644 index 00000000000..9c0b92e2572 --- /dev/null +++ b/2018/12xxx/CVE-2018-12295.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12295", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12296.json b/2018/12xxx/CVE-2018-12296.json new file mode 100644 index 00000000000..60d3abb6117 --- /dev/null +++ b/2018/12xxx/CVE-2018-12296.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12296", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12297.json b/2018/12xxx/CVE-2018-12297.json new file mode 100644 index 00000000000..f2cef4fdde9 --- /dev/null +++ b/2018/12xxx/CVE-2018-12297.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12297", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12298.json b/2018/12xxx/CVE-2018-12298.json new file mode 100644 index 00000000000..d14006a4391 --- /dev/null +++ b/2018/12xxx/CVE-2018-12298.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12298", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12299.json b/2018/12xxx/CVE-2018-12299.json new file mode 100644 index 00000000000..2409c546d5f --- /dev/null +++ b/2018/12xxx/CVE-2018-12299.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12299", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12300.json b/2018/12xxx/CVE-2018-12300.json new file mode 100644 index 00000000000..aa788c7066f --- /dev/null +++ b/2018/12xxx/CVE-2018-12300.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12300", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12301.json b/2018/12xxx/CVE-2018-12301.json new file mode 100644 index 00000000000..d97cb1b1e76 --- /dev/null +++ b/2018/12xxx/CVE-2018-12301.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12301", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12302.json b/2018/12xxx/CVE-2018-12302.json new file mode 100644 index 00000000000..4148d81c944 --- /dev/null +++ b/2018/12xxx/CVE-2018-12302.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12302", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12303.json b/2018/12xxx/CVE-2018-12303.json new file mode 100644 index 00000000000..3f378f8ed12 --- /dev/null +++ b/2018/12xxx/CVE-2018-12303.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12303", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12304.json b/2018/12xxx/CVE-2018-12304.json new file mode 100644 index 00000000000..c5d433a525a --- /dev/null +++ b/2018/12xxx/CVE-2018-12304.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12304", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12305.json b/2018/12xxx/CVE-2018-12305.json new file mode 100644 index 00000000000..e8aea01a046 --- /dev/null +++ b/2018/12xxx/CVE-2018-12305.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12305", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12306.json b/2018/12xxx/CVE-2018-12306.json new file mode 100644 index 00000000000..21400815d3c --- /dev/null +++ b/2018/12xxx/CVE-2018-12306.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12306", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12307.json b/2018/12xxx/CVE-2018-12307.json new file mode 100644 index 00000000000..77c0ddbae88 --- /dev/null +++ b/2018/12xxx/CVE-2018-12307.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12307", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12308.json b/2018/12xxx/CVE-2018-12308.json new file mode 100644 index 00000000000..6201b6c437c --- /dev/null +++ b/2018/12xxx/CVE-2018-12308.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12308", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12309.json b/2018/12xxx/CVE-2018-12309.json new file mode 100644 index 00000000000..62b9d18665f --- /dev/null +++ b/2018/12xxx/CVE-2018-12309.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12309", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12310.json b/2018/12xxx/CVE-2018-12310.json new file mode 100644 index 00000000000..8c895f89171 --- /dev/null +++ b/2018/12xxx/CVE-2018-12310.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12310", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12311.json b/2018/12xxx/CVE-2018-12311.json new file mode 100644 index 00000000000..9860b5e5625 --- /dev/null +++ b/2018/12xxx/CVE-2018-12311.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12311", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12312.json b/2018/12xxx/CVE-2018-12312.json new file mode 100644 index 00000000000..cbcad0a6a91 --- /dev/null +++ b/2018/12xxx/CVE-2018-12312.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12312", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12313.json b/2018/12xxx/CVE-2018-12313.json new file mode 100644 index 00000000000..a2e732517b0 --- /dev/null +++ b/2018/12xxx/CVE-2018-12313.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12313", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12314.json b/2018/12xxx/CVE-2018-12314.json new file mode 100644 index 00000000000..89ccfdab7e6 --- /dev/null +++ b/2018/12xxx/CVE-2018-12314.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12314", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12315.json b/2018/12xxx/CVE-2018-12315.json new file mode 100644 index 00000000000..58bb812dc90 --- /dev/null +++ b/2018/12xxx/CVE-2018-12315.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12315", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12316.json b/2018/12xxx/CVE-2018-12316.json new file mode 100644 index 00000000000..bff424cedff --- /dev/null +++ b/2018/12xxx/CVE-2018-12316.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12316", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12317.json b/2018/12xxx/CVE-2018-12317.json new file mode 100644 index 00000000000..e0ab2101671 --- /dev/null +++ b/2018/12xxx/CVE-2018-12317.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12317", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12318.json b/2018/12xxx/CVE-2018-12318.json new file mode 100644 index 00000000000..11cc51b2936 --- /dev/null +++ b/2018/12xxx/CVE-2018-12318.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12318", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12319.json b/2018/12xxx/CVE-2018-12319.json new file mode 100644 index 00000000000..f8e9518d708 --- /dev/null +++ b/2018/12xxx/CVE-2018-12319.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12319", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12320.json b/2018/12xxx/CVE-2018-12320.json new file mode 100644 index 00000000000..6e8e4a8e509 --- /dev/null +++ b/2018/12xxx/CVE-2018-12320.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12320", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12321.json b/2018/12xxx/CVE-2018-12321.json new file mode 100644 index 00000000000..8a26a23c089 --- /dev/null +++ b/2018/12xxx/CVE-2018-12321.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12321", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/12xxx/CVE-2018-12322.json b/2018/12xxx/CVE-2018-12322.json new file mode 100644 index 00000000000..e6d3b9c019a --- /dev/null +++ b/2018/12xxx/CVE-2018-12322.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-12322", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} diff --git a/2018/3xxx/CVE-2018-3759.json b/2018/3xxx/CVE-2018-3759.json index 204c493c4be..75f414aaab7 100644 --- a/2018/3xxx/CVE-2018-3759.json +++ b/2018/3xxx/CVE-2018-3759.json @@ -35,7 +35,7 @@ "description_data" : [ { "lang" : "eng", - "value" : "private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being checked. DNS entries with a TTL of 0 can trigger this case where the initial resolution is a public address by the subsequent resolution is a private address." + "value" : "private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being checked. DNS entries with a TTL of 0 can trigger this case where the initial resolution is a public address but the subsequent resolution is a private address." } ] }, @@ -54,6 +54,8 @@ "references" : { "reference_data" : [ { + "name" : "https://github.com/jtdowney/private_address_check/commit/4068228187db87fea7577f7020099399772bb147", + "refsource" : "MISC", "url" : "https://github.com/jtdowney/private_address_check/commit/4068228187db87fea7577f7020099399772bb147" } ]