From 51f374b171841494fcd386ff1cdafcc498e85cbc Mon Sep 17 00:00:00 2001 From: Neal Poole Date: Mon, 13 May 2019 15:12:46 -0700 Subject: [PATCH] Publish CVE-2019-3568 --- 2019/3xxx/CVE-2019-3568.json | 168 ++++++++++++++++++++++++++++++++++- 1 file changed, 164 insertions(+), 4 deletions(-) diff --git a/2019/3xxx/CVE-2019-3568.json b/2019/3xxx/CVE-2019-3568.json index 5121b826463..092d2dbf063 100644 --- a/2019/3xxx/CVE-2019-3568.json +++ b/2019/3xxx/CVE-2019-3568.json @@ -1,8 +1,147 @@ { "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", + "ASSIGNER": "cve-assign@fb.com", + "DATE_ASSIGNED": "2019-05-09", "ID": "CVE-2019-3568", - "STATE": "RESERVED" + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "WhatsApp for Android", + "version": { + "version_data": [ + { + "version_affected": "!=>", + "version_value": "2.19.134" + }, + { + "version_affected": "<", + "version_value": "2.19.134" + } + ] + } + } + ] + }, + "vendor_name": "Facebook" + }, + { + "product": { + "product_data": [ + { + "product_name": "WhatsApp Business for Android", + "version": { + "version_data": [ + { + "version_affected": "!=>", + "version_value": "2.19.44" + }, + { + "version_affected": "<", + "version_value": "2.19.134" + } + ] + } + } + ] + }, + "vendor_name": "Facebook" + }, + { + "product": { + "product_data": [ + { + "product_name": "WhatsApp for iOS", + "version": { + "version_data": [ + { + "version_affected": "!=>", + "version_value": "2.19.51" + }, + { + "version_affected": "<", + "version_value": "2.19.51" + } + ] + } + } + ] + }, + "vendor_name": "Facebook" + }, + { + "product": { + "product_data": [ + { + "product_name": "WhatsApp Business for iOS", + "version": { + "version_data": [ + { + "version_affected": "!=>", + "version_value": "2.19.51" + }, + { + "version_affected": "<", + "version_value": "2.19.51" + } + ] + } + } + ] + }, + "vendor_name": "Facebook" + }, + { + "product": { + "product_data": [ + { + "product_name": "WhatsApp for Windows Phone", + "version": { + "version_data": [ + { + "version_affected": "!=>", + "version_value": "2.18.348" + }, + { + "version_affected": "<", + "version_value": "2.18.348" + } + ] + } + } + ] + }, + "vendor_name": "Facebook" + }, + { + "product": { + "product_data": [ + { + "product_name": "WhatsApp for Tizen", + "version": { + "version_data": [ + { + "version_affected": "!=>", + "version_value": "2.18.15" + }, + { + "version_affected": "<", + "version_value": "2.18.15" + } + ] + } + } + ] + }, + "vendor_name": "Facebook" + } + ] + } }, "data_format": "MITRE", "data_type": "CVE", @@ -11,8 +150,29 @@ "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of SRTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "Heap-based Buffer Overflow (CWE-122)" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "https://www.facebook.com/security/advisories/cve-2019-3568", + "refsource": "MISC", + "url": "https://www.facebook.com/security/advisories/cve-2019-3568" } ] } -} \ No newline at end of file +}