From e85fa3326ad12cc1041380d97097c6514493e530 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Mon, 24 Feb 2020 17:01:08 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2012/0xxx/CVE-2012-0785.json | 93 ++++++++++++++++++++++++++++++++-- 2019/0xxx/CVE-2019-0189.json | 5 ++ 2019/14xxx/CVE-2019-14598.json | 5 ++ 2019/15xxx/CVE-2019-15604.json | 10 ++++ 2019/15xxx/CVE-2019-15605.json | 10 ++++ 2019/15xxx/CVE-2019-15606.json | 10 ++++ 2019/16xxx/CVE-2019-16775.json | 5 ++ 2019/16xxx/CVE-2019-16776.json | 5 ++ 2019/16xxx/CVE-2019-16777.json | 5 ++ 2019/16xxx/CVE-2019-16865.json | 10 ++++ 2019/9xxx/CVE-2019-9674.json | 5 ++ 2020/5xxx/CVE-2020-5311.json | 5 ++ 2020/5xxx/CVE-2020-5312.json | 10 ++++ 2020/7xxx/CVE-2020-7059.json | 5 ++ 2020/7xxx/CVE-2020-7060.json | 5 ++ 2020/7xxx/CVE-2020-7471.json | 5 ++ 2020/8xxx/CVE-2020-8492.json | 5 ++ 2020/9xxx/CVE-2020-9366.json | 67 ++++++++++++++++++++++++ 2020/9xxx/CVE-2020-9367.json | 18 +++++++ 2020/9xxx/CVE-2020-9368.json | 18 +++++++ 20 files changed, 298 insertions(+), 3 deletions(-) create mode 100644 2020/9xxx/CVE-2020-9366.json create mode 100644 2020/9xxx/CVE-2020-9367.json create mode 100644 2020/9xxx/CVE-2020-9368.json diff --git a/2012/0xxx/CVE-2012-0785.json b/2012/0xxx/CVE-2012-0785.json index cbb3f0ec8c8..156b505ade4 100644 --- a/2012/0xxx/CVE-2012-0785.json +++ b/2012/0xxx/CVE-2012-0785.json @@ -1,8 +1,54 @@ { "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", + "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-0785", - "STATE": "RESERVED" + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Jenkins project", + "product": { + "product_data": [ + { + "product_name": "Jenkins", + "version": { + "version_data": [ + { + "version_value": "before 1.447" + } + ] + } + }, + { + "product_name": "Jenkins LTS", + "version": { + "version_data": [ + { + "version_value": "before 1.424.2" + } + ] + } + }, + { + "product_name": "Jenkins Enterprise by CloudBees", + "version": { + "version_data": [ + { + "version_value": "1.424.x before 1.424.2.1" + }, + { + "version_value": "1.400.x before 1.400.0.11" + } + ] + } + } + ] + } + } + ] + } }, "data_format": "MITRE", "data_type": "CVE", @@ -11,7 +57,48 @@ "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka \"the Hash DoS attack.\"" + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "and hash collision attack" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MLIST", + "name": "[oss-security] 20120119 Re: CVE request: Jenkins", + "url": "http://www.openwall.com/lists/oss-security/2012/01/20/8" + }, + { + "url": "https://security-tracker.debian.org/tracker/CVE-2012-0785", + "refsource": "MISC", + "name": "https://security-tracker.debian.org/tracker/CVE-2012-0785" + }, + { + "url": "https://access.redhat.com/security/cve/cve-2012-0785", + "refsource": "MISC", + "name": "https://access.redhat.com/security/cve/cve-2012-0785" + }, + { + "refsource": "CONFIRM", + "name": "https://jenkins.io/security/advisory/2012-01-12/", + "url": "https://jenkins.io/security/advisory/2012-01-12/" + }, + { + "refsource": "CONFIRM", + "name": "https://www.cloudbees.com/jenkins-security-advisory-2012-01-12", + "url": "https://www.cloudbees.com/jenkins-security-advisory-2012-01-12" } ] } diff --git a/2019/0xxx/CVE-2019-0189.json b/2019/0xxx/CVE-2019-0189.json index bdba7e87825..4ffe5df55d8 100644 --- a/2019/0xxx/CVE-2019-0189.json +++ b/2019/0xxx/CVE-2019-0189.json @@ -83,6 +83,11 @@ "refsource": "MLIST", "name": "[ofbiz-commits] 20200224 [ofbiz-framework] branch release18.12 updated: Fixed: Improve ObjectInputStream class (CVE-2019-0189) Improved: no functional change (OFBIZ-10837) (OFBIZ-11398)", "url": "https://lists.apache.org/thread.html/rb0e716837168dc1073fcd76bea644806e5337c247fdb5d8c243d41f8@%3Ccommits.ofbiz.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[ofbiz-notifications] 20200224 [jira] [Updated] (OFBIZ-10837) Improve ObjectInputStream class (CVE-2019-0189)", + "url": "https://lists.apache.org/thread.html/re4623c0fec904882cbbf8cda558f88c1857397fb5c35761bc12a78bd@%3Cnotifications.ofbiz.apache.org%3E" } ] }, diff --git a/2019/14xxx/CVE-2019-14598.json b/2019/14xxx/CVE-2019-14598.json index 7202497262a..c386272650e 100644 --- a/2019/14xxx/CVE-2019-14598.json +++ b/2019/14xxx/CVE-2019-14598.json @@ -48,6 +48,11 @@ "refsource": "MISC", "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00307.html", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00307.html" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0005/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0005/" } ] }, diff --git a/2019/15xxx/CVE-2019-15604.json b/2019/15xxx/CVE-2019-15604.json index f7e0c981fe4..b84d6c3ccdf 100644 --- a/2019/15xxx/CVE-2019-15604.json +++ b/2019/15xxx/CVE-2019-15604.json @@ -68,6 +68,16 @@ "refsource": "CONFIRM", "name": "https://nodejs.org/en/blog/release/v12.15.0/", "url": "https://nodejs.org/en/blog/release/v12.15.0/" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0004/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0004/" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0573", + "url": "https://access.redhat.com/errata/RHSA-2020:0573" } ] }, diff --git a/2019/15xxx/CVE-2019-15605.json b/2019/15xxx/CVE-2019-15605.json index 2d4418d9ff2..94a1c7f4f66 100644 --- a/2019/15xxx/CVE-2019-15605.json +++ b/2019/15xxx/CVE-2019-15605.json @@ -78,6 +78,16 @@ "refsource": "FEDORA", "name": "FEDORA-2020-47efc31973", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CT3WTR4P5VAJ3GJGKPYEDUPTNZ3IEDUR/" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0004/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0004/" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0573", + "url": "https://access.redhat.com/errata/RHSA-2020:0573" } ] }, diff --git a/2019/15xxx/CVE-2019-15606.json b/2019/15xxx/CVE-2019-15606.json index 5eb654141c8..399eafe0bad 100644 --- a/2019/15xxx/CVE-2019-15606.json +++ b/2019/15xxx/CVE-2019-15606.json @@ -68,6 +68,16 @@ "refsource": "CONFIRM", "name": "https://nodejs.org/en/blog/release/v12.15.0/", "url": "https://nodejs.org/en/blog/release/v12.15.0/" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0004/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0004/" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0573", + "url": "https://access.redhat.com/errata/RHSA-2020:0573" } ] }, diff --git a/2019/16xxx/CVE-2019-16775.json b/2019/16xxx/CVE-2019-16775.json index 29a533ef8b5..1fd7fc44fbf 100644 --- a/2019/16xxx/CVE-2019-16775.json +++ b/2019/16xxx/CVE-2019-16775.json @@ -100,6 +100,11 @@ "refsource": "REDHAT", "name": "RHEA-2020:0330", "url": "https://access.redhat.com/errata/RHEA-2020:0330" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0573", + "url": "https://access.redhat.com/errata/RHSA-2020:0573" } ] }, diff --git a/2019/16xxx/CVE-2019-16776.json b/2019/16xxx/CVE-2019-16776.json index 17b3f09a120..38bdbc9e5d6 100644 --- a/2019/16xxx/CVE-2019-16776.json +++ b/2019/16xxx/CVE-2019-16776.json @@ -100,6 +100,11 @@ "refsource": "REDHAT", "name": "RHEA-2020:0330", "url": "https://access.redhat.com/errata/RHEA-2020:0330" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0573", + "url": "https://access.redhat.com/errata/RHSA-2020:0573" } ] }, diff --git a/2019/16xxx/CVE-2019-16777.json b/2019/16xxx/CVE-2019-16777.json index 423dc740d7f..3861fd3481d 100644 --- a/2019/16xxx/CVE-2019-16777.json +++ b/2019/16xxx/CVE-2019-16777.json @@ -100,6 +100,11 @@ "refsource": "REDHAT", "name": "RHEA-2020:0330", "url": "https://access.redhat.com/errata/RHEA-2020:0330" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0573", + "url": "https://access.redhat.com/errata/RHSA-2020:0573" } ] }, diff --git a/2019/16xxx/CVE-2019-16865.json b/2019/16xxx/CVE-2019-16865.json index 27f2c0ca9ac..f2771c9137e 100644 --- a/2019/16xxx/CVE-2019-16865.json +++ b/2019/16xxx/CVE-2019-16865.json @@ -81,6 +81,16 @@ "refsource": "DEBIAN", "name": "DSA-4631", "url": "https://www.debian.org/security/2020/dsa-4631" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0580", + "url": "https://access.redhat.com/errata/RHSA-2020:0580" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0578", + "url": "https://access.redhat.com/errata/RHSA-2020:0578" } ] } diff --git a/2019/9xxx/CVE-2019-9674.json b/2019/9xxx/CVE-2019-9674.json index 3447cf71e6d..0b33a89957f 100644 --- a/2019/9xxx/CVE-2019-9674.json +++ b/2019/9xxx/CVE-2019-9674.json @@ -76,6 +76,11 @@ "refsource": "MISC", "name": "https://python-security.readthedocs.io/security.html#archives-and-zip-bomb", "url": "https://python-security.readthedocs.io/security.html#archives-and-zip-bomb" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0003/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0003/" } ] } diff --git a/2020/5xxx/CVE-2020-5311.json b/2020/5xxx/CVE-2020-5311.json index 881765f8ae5..36cc0f9cef6 100644 --- a/2020/5xxx/CVE-2020-5311.json +++ b/2020/5xxx/CVE-2020-5311.json @@ -86,6 +86,11 @@ "refsource": "DEBIAN", "name": "DSA-4631", "url": "https://www.debian.org/security/2020/dsa-4631" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0580", + "url": "https://access.redhat.com/errata/RHSA-2020:0580" } ] } diff --git a/2020/5xxx/CVE-2020-5312.json b/2020/5xxx/CVE-2020-5312.json index 4d36a76087d..7b7d1a34402 100644 --- a/2020/5xxx/CVE-2020-5312.json +++ b/2020/5xxx/CVE-2020-5312.json @@ -86,6 +86,16 @@ "refsource": "DEBIAN", "name": "DSA-4631", "url": "https://www.debian.org/security/2020/dsa-4631" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0580", + "url": "https://access.redhat.com/errata/RHSA-2020:0580" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0578", + "url": "https://access.redhat.com/errata/RHSA-2020:0578" } ] } diff --git a/2020/7xxx/CVE-2020-7059.json b/2020/7xxx/CVE-2020-7059.json index 5f6a633c745..f3548c467f6 100644 --- a/2020/7xxx/CVE-2020-7059.json +++ b/2020/7xxx/CVE-2020-7059.json @@ -120,6 +120,11 @@ "refsource": "BUGTRAQ", "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update", "url": "https://seclists.org/bugtraq/2020/Feb/31" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0002/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0002/" } ] }, diff --git a/2020/7xxx/CVE-2020-7060.json b/2020/7xxx/CVE-2020-7060.json index 3e11859702d..4f4c54f409b 100644 --- a/2020/7xxx/CVE-2020-7060.json +++ b/2020/7xxx/CVE-2020-7060.json @@ -120,6 +120,11 @@ "refsource": "BUGTRAQ", "name": "20200219 [SECURITY] [DSA 4628-1] php7.0 security update", "url": "https://seclists.org/bugtraq/2020/Feb/31" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0002/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0002/" } ] }, diff --git a/2020/7xxx/CVE-2020-7471.json b/2020/7xxx/CVE-2020-7471.json index b16d5d924f9..221074945fc 100644 --- a/2020/7xxx/CVE-2020-7471.json +++ b/2020/7xxx/CVE-2020-7471.json @@ -96,6 +96,11 @@ "refsource": "DEBIAN", "name": "DSA-4629", "url": "https://www.debian.org/security/2020/dsa-4629" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0006/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0006/" } ] } diff --git a/2020/8xxx/CVE-2020-8492.json b/2020/8xxx/CVE-2020-8492.json index 73294d84ac1..0c06c987df4 100644 --- a/2020/8xxx/CVE-2020-8492.json +++ b/2020/8xxx/CVE-2020-8492.json @@ -66,6 +66,11 @@ "url": "https://github.com/python/cpython/pull/18284", "refsource": "MISC", "name": "https://github.com/python/cpython/pull/18284" + }, + { + "refsource": "CONFIRM", + "name": "https://security.netapp.com/advisory/ntap-20200221-0001/", + "url": "https://security.netapp.com/advisory/ntap-20200221-0001/" } ] } diff --git a/2020/9xxx/CVE-2020-9366.json b/2020/9xxx/CVE-2020-9366.json new file mode 100644 index 00000000000..1b82caf4771 --- /dev/null +++ b/2020/9xxx/CVE-2020-9366.json @@ -0,0 +1,67 @@ +{ + "CVE_data_meta": { + "ASSIGNER": "cve@mitre.org", + "ID": "CVE-2020-9366", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://www.openwall.com/lists/oss-security/2020/02/06/3", + "refsource": "MISC", + "name": "https://www.openwall.com/lists/oss-security/2020/02/06/3" + }, + { + "url": "https://lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.html", + "refsource": "MISC", + "name": "https://lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.html" + } + ] + } +} \ No newline at end of file diff --git a/2020/9xxx/CVE-2020-9367.json b/2020/9xxx/CVE-2020-9367.json new file mode 100644 index 00000000000..265d8ce157d --- /dev/null +++ b/2020/9xxx/CVE-2020-9367.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2020-9367", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2020/9xxx/CVE-2020-9368.json b/2020/9xxx/CVE-2020-9368.json new file mode 100644 index 00000000000..3138e069bef --- /dev/null +++ b/2020/9xxx/CVE-2020-9368.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2020-9368", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file