From eb2a9c4b32d112f7d8dce42fefa2301f78d02002 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 11 Oct 2023 17:00:39 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2023/35xxx/CVE-2023-35967.json | 5 +++++ 2023/35xxx/CVE-2023-35968.json | 5 +++++ 2023/43xxx/CVE-2023-43641.json | 10 +++++----- 2023/5xxx/CVE-2023-5527.json | 18 ++++++++++++++++++ 2023/5xxx/CVE-2023-5528.json | 18 ++++++++++++++++++ 2023/5xxx/CVE-2023-5529.json | 18 ++++++++++++++++++ 6 files changed, 69 insertions(+), 5 deletions(-) create mode 100644 2023/5xxx/CVE-2023-5527.json create mode 100644 2023/5xxx/CVE-2023-5528.json create mode 100644 2023/5xxx/CVE-2023-5529.json diff --git a/2023/35xxx/CVE-2023-35967.json b/2023/35xxx/CVE-2023-35967.json index 9e693ff45a0..512986c4b3d 100644 --- a/2023/35xxx/CVE-2023-35967.json +++ b/2023/35xxx/CVE-2023-35967.json @@ -58,6 +58,11 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788" + }, + { + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1788", + "refsource": "MISC", + "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1788" } ] }, diff --git a/2023/35xxx/CVE-2023-35968.json b/2023/35xxx/CVE-2023-35968.json index 5133d0600aa..8fb37949b68 100644 --- a/2023/35xxx/CVE-2023-35968.json +++ b/2023/35xxx/CVE-2023-35968.json @@ -58,6 +58,11 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788" + }, + { + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1788", + "refsource": "MISC", + "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1788" } ] }, diff --git a/2023/43xxx/CVE-2023-43641.json b/2023/43xxx/CVE-2023-43641.json index 200b7dee302..ff62e690a04 100644 --- a/2023/43xxx/CVE-2023-43641.json +++ b/2023/43xxx/CVE-2023-43641.json @@ -11,7 +11,7 @@ "description_data": [ { "lang": "eng", - "value": "libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to `~/Downloads`, it is then automatically scanned by tracker-miners. And because it has a .cue filename extension, tracker-miners use libcue to parse the file. The file exploits the vulnerability in libcue to gain code execution." + "value": "libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to `~/Downloads`, it is then automatically scanned by tracker-miners. And because it has a .cue filename extension, tracker-miners use libcue to parse the file. The file exploits the vulnerability in libcue to gain code execution. This issue is patched in version 2.3.0." } ] }, @@ -65,14 +65,14 @@ "name": "https://github.com/lipnitsk/libcue/security/advisories/GHSA-5982-x7hv-r9cj" }, { - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2IYRNAHR55MLFOHVOOIO46GBTGZD4G4W/", + "url": "https://github.com/lipnitsk/libcue/commit/cfb98a060fd79dbc3463d85f0f29c3c335dfa0ea", "refsource": "MISC", - "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2IYRNAHR55MLFOHVOOIO46GBTGZD4G4W/" + "name": "https://github.com/lipnitsk/libcue/commit/cfb98a060fd79dbc3463d85f0f29c3c335dfa0ea" }, { - "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7FPN4SA2GU3D2YOFXF2KDBWTFJX7MOW/", + "url": "https://github.com/lipnitsk/libcue/commit/fdf72c8bded8d24cfa0608b8e97f2eed210a920e", "refsource": "MISC", - "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7FPN4SA2GU3D2YOFXF2KDBWTFJX7MOW/" + "name": "https://github.com/lipnitsk/libcue/commit/fdf72c8bded8d24cfa0608b8e97f2eed210a920e" } ] }, diff --git a/2023/5xxx/CVE-2023-5527.json b/2023/5xxx/CVE-2023-5527.json new file mode 100644 index 00000000000..bcf8927e118 --- /dev/null +++ b/2023/5xxx/CVE-2023-5527.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2023-5527", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2023/5xxx/CVE-2023-5528.json b/2023/5xxx/CVE-2023-5528.json new file mode 100644 index 00000000000..aaa1f155589 --- /dev/null +++ b/2023/5xxx/CVE-2023-5528.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2023-5528", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2023/5xxx/CVE-2023-5529.json b/2023/5xxx/CVE-2023-5529.json new file mode 100644 index 00000000000..a115112c8af --- /dev/null +++ b/2023/5xxx/CVE-2023-5529.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2023-5529", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file