diff --git a/CVE-1999/CVE-1999-00xx/CVE-1999-0016.json b/CVE-1999/CVE-1999-00xx/CVE-1999-0016.json index 61b6d74db4f..acca2bdbf3c 100644 --- a/CVE-1999/CVE-1999-00xx/CVE-1999-0016.json +++ b/CVE-1999/CVE-1999-00xx/CVE-1999-0016.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0016", "sourceIdentifier": "cve@mitre.org", "published": "1997-12-01T05:00:00.000", - "lastModified": "2024-11-20T23:27:37.157", + "lastModified": "2025-03-17T15:15:36.883", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -202,6 +202,10 @@ { "url": "http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-076", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://security.netapp.com/advisory/ntap-20170815-0001/", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-1999/CVE-1999-01xx/CVE-1999-0103.json b/CVE-1999/CVE-1999-01xx/CVE-1999-0103.json index c689706bd30..d6b3672e71b 100644 --- a/CVE-1999/CVE-1999-01xx/CVE-1999-0103.json +++ b/CVE-1999/CVE-1999-01xx/CVE-1999-0103.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0103", "sourceIdentifier": "cve@mitre.org", "published": "1996-02-08T05:00:00.000", - "lastModified": "2024-11-20T23:27:51.863", + "lastModified": "2025-03-17T15:15:37.887", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -55,6 +55,10 @@ "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01", "source": "cve@mitre.org" }, + { + "url": "http://www.securityfocus.com/bid/80171", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, { "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01", "source": "af854a3a-2127-422b-91ae-364da2661108" diff --git a/CVE-1999/CVE-1999-01xx/CVE-1999-0186.json b/CVE-1999/CVE-1999-01xx/CVE-1999-0186.json index 03fc0cbba05..ba166610438 100644 --- a/CVE-1999/CVE-1999-01xx/CVE-1999-0186.json +++ b/CVE-1999/CVE-1999-01xx/CVE-1999-0186.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0186", "sourceIdentifier": "cve@mitre.org", "published": "1998-10-01T04:00:00.000", - "lastModified": "2024-11-20T23:28:04.807", + "lastModified": "2025-03-17T15:15:38.033", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -75,6 +75,10 @@ { "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-238/", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-1999/CVE-1999-02xx/CVE-1999-0254.json b/CVE-1999/CVE-1999-02xx/CVE-1999-0254.json index befb454f6d2..9719d69bb8e 100644 --- a/CVE-1999/CVE-1999-02xx/CVE-1999-0254.json +++ b/CVE-1999/CVE-1999-02xx/CVE-1999-0254.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0254", "sourceIdentifier": "cve@mitre.org", "published": "1998-11-02T05:00:00.000", - "lastModified": "2024-11-20T23:28:15.120", + "lastModified": "2025-03-17T15:15:38.187", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -75,6 +75,14 @@ { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0254", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-239", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-239/", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-1999/CVE-1999-04xx/CVE-1999-0472.json b/CVE-1999/CVE-1999-04xx/CVE-1999-0472.json index 86e950949ab..f881afbbe79 100644 --- a/CVE-1999/CVE-1999-04xx/CVE-1999-0472.json +++ b/CVE-1999/CVE-1999-04xx/CVE-1999-0472.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0472", "sourceIdentifier": "cve@mitre.org", "published": "1999-04-07T04:00:00.000", - "lastModified": "2024-11-20T23:28:48.983", + "lastModified": "2025-03-17T15:15:38.337", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -90,6 +90,14 @@ { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0472", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-240", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-240/", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-1999/CVE-1999-05xx/CVE-1999-0516.json b/CVE-1999/CVE-1999-05xx/CVE-1999-0516.json index b1023482687..64c6e66f408 100644 --- a/CVE-1999/CVE-1999-05xx/CVE-1999-0516.json +++ b/CVE-1999/CVE-1999-05xx/CVE-1999-0516.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0516", "sourceIdentifier": "cve@mitre.org", "published": "1998-08-01T04:00:00.000", - "lastModified": "2024-11-20T23:28:55.497", + "lastModified": "2025-03-17T15:15:38.497", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -58,6 +58,14 @@ { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0516", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-243", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-243/", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-1999/CVE-1999-05xx/CVE-1999-0517.json b/CVE-1999/CVE-1999-05xx/CVE-1999-0517.json index 6993689524e..74beaec1a90 100644 --- a/CVE-1999/CVE-1999-05xx/CVE-1999-0517.json +++ b/CVE-1999/CVE-1999-05xx/CVE-1999-0517.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0517", "sourceIdentifier": "cve@mitre.org", "published": "1997-01-01T05:00:00.000", - "lastModified": "2024-11-20T23:28:55.640", + "lastModified": "2025-03-17T15:15:38.620", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -85,6 +85,14 @@ { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0517", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-244", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-244/", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-1999/CVE-1999-05xx/CVE-1999-0524.json b/CVE-1999/CVE-1999-05xx/CVE-1999-0524.json index 75d188c4115..695989dd579 100644 --- a/CVE-1999/CVE-1999-05xx/CVE-1999-0524.json +++ b/CVE-1999/CVE-1999-05xx/CVE-1999-0524.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0524", "sourceIdentifier": "cve@mitre.org", "published": "1997-08-01T04:00:00.000", - "lastModified": "2024-11-20T23:28:56.657", + "lastModified": "2025-03-17T15:15:38.743", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -256,6 +256,10 @@ "tags": [ "Broken Link" ] + }, + { + "url": "https://support.f5.com/csp/article/K15277", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ], "vendorComments": [ diff --git a/CVE-1999/CVE-1999-05xx/CVE-1999-0532.json b/CVE-1999/CVE-1999-05xx/CVE-1999-0532.json index 96fdd8b4a30..9fcf0045fcd 100644 --- a/CVE-1999/CVE-1999-05xx/CVE-1999-0532.json +++ b/CVE-1999/CVE-1999-05xx/CVE-1999-0532.json @@ -2,7 +2,7 @@ "id": "CVE-1999-0532", "sourceIdentifier": "cve@mitre.org", "published": "1997-07-01T04:00:00.000", - "lastModified": "2024-11-20T23:28:57.760", + "lastModified": "2025-03-17T15:15:38.950", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -55,6 +55,10 @@ "url": "https://www.cve.org/CVERecord?id=CVE-1999-0532", "source": "cve@mitre.org" }, + { + "url": "http://www.us-cert.gov/ncas/alerts/TA15-103A", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, { "url": "https://www.cve.org/CVERecord?id=CVE-1999-0532", "source": "af854a3a-2127-422b-91ae-364da2661108" diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47166.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47166.json index 5088f9d63a6..3ba1bac2997 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47166.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47166.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47166", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:08.667", - "lastModified": "2024-11-21T06:35:32.270", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:03:38.947", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,71 +15,230 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: NFS: no corrompa el valor de pg_bytes_writing en nfs_do_recoalesce() El valor de mirror->pg_bytes_write solo debe actualizarse despu\u00e9s de un intento exitoso de eliminar las solicitudes de la lista." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0", + "versionEndExcluding": "4.4.271", + "matchCriteriaId": "2DB78FDC-C9EA-4ACD-A898-A03A3597EEDF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", + "versionEndExcluding": "4.9.271", + "matchCriteriaId": "1E7DAE3A-78E9-45DB-96D8-4541CD7DC26B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.235", + "matchCriteriaId": "03A23445-0C1A-42AB-AC5C-768360DDF32C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.193", + "matchCriteriaId": "C8DEF3EC-88D9-4B89-8CF9-64BD6C863C9D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.124", + "matchCriteriaId": "06FE0F99-F7A9-462A-8355-30E2EDA9826B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.42", + "matchCriteriaId": "C3E7E799-1C8A-45FB-9E07-4731996144C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0d0ea309357dea0d85a82815f02157eb7fcda39f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fe1cac336b55a1f79e603e9ce3552c3623e90eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/40f139a6d50c232c0d1fd1c5e65a845c62db0ede", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7087db95c0a06ab201b8ebfac6a7ec1e34257997", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/785917316b25685c9b3a2a88f933139f2de75e33", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b291baae24f876acd5a5dd57d0bb2bbac8a68b0c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c757c1f1e65d89429db1409429436cf40d47c008", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8b8418ce14ae66ee55179901edd12191ab06a9e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0d0ea309357dea0d85a82815f02157eb7fcda39f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fe1cac336b55a1f79e603e9ce3552c3623e90eb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/40f139a6d50c232c0d1fd1c5e65a845c62db0ede", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7087db95c0a06ab201b8ebfac6a7ec1e34257997", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/785917316b25685c9b3a2a88f933139f2de75e33", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b291baae24f876acd5a5dd57d0bb2bbac8a68b0c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c757c1f1e65d89429db1409429436cf40d47c008", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8b8418ce14ae66ee55179901edd12191ab06a9e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47167.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47167.json index b62fc6cff42..50fe24e8186 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47167.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47167.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47167", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:08.720", - "lastModified": "2024-11-21T06:35:32.403", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:03:30.547", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,146 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: NFS: corrija una condici\u00f3n de Oopsable en __nfs_pageio_add_request() Aseg\u00farese de que nfs_pageio_error_cleanup() restablezca el contenido de la matriz reflejada, de modo que la estructura refleje el hecho de que ahora est\u00e1 vac\u00eda. Tambi\u00e9n cambie la prueba en nfs_pageio_do_add_request() para que sea m\u00e1s s\u00f3lida verificando si la lista est\u00e1 vac\u00eda o no en lugar de confiar en el valor de pg_count." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0", + "versionEndExcluding": "5.4.124", + "matchCriteriaId": "BFF1059E-D511-4B6A-A7BE-17F5E29378F2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.42", + "matchCriteriaId": "C3E7E799-1C8A-45FB-9E07-4731996144C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/15ac6f14787649e8ebd75c142e2c5d2a243c8490", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1fc5f4eb9d31268ac3ce152d74ad5501ad24ca3e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/56517ab958b7c11030e626250c00b9b1a24b41eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee21cd3aa8548e0cbc8c67a80b62113aedd2d101", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/15ac6f14787649e8ebd75c142e2c5d2a243c8490", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1fc5f4eb9d31268ac3ce152d74ad5501ad24ca3e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/56517ab958b7c11030e626250c00b9b1a24b41eb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee21cd3aa8548e0cbc8c67a80b62113aedd2d101", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47168.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47168.json index 93eebf0a199..14de443bc0d 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47168.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47168.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47168", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:08.773", - "lastModified": "2024-11-21T06:35:32.533", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:03:22.997", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,71 +15,230 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFS: corrige un l\u00edmite incorrecto en filelayout_decode_layout() El \"sizeof(struct nfs_fh)\" es dos bytes demasiado grande y podr\u00eda provocar da\u00f1os en la memoria. Deber\u00eda ser NFS_MAXFHSIZE porque ese es el tama\u00f1o del b\u00fafer ->datos[]. Invert\u00ed el tama\u00f1o de los argumentos para poner la variable a la izquierda." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.37", + "versionEndExcluding": "4.4.271", + "matchCriteriaId": "AA9C0516-0AB8-4BC5-8058-1896E469EB2D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.5", + "versionEndExcluding": "4.9.271", + "matchCriteriaId": "1E7DAE3A-78E9-45DB-96D8-4541CD7DC26B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.235", + "matchCriteriaId": "03A23445-0C1A-42AB-AC5C-768360DDF32C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.193", + "matchCriteriaId": "C8DEF3EC-88D9-4B89-8CF9-64BD6C863C9D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.124", + "matchCriteriaId": "06FE0F99-F7A9-462A-8355-30E2EDA9826B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.42", + "matchCriteriaId": "C3E7E799-1C8A-45FB-9E07-4731996144C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/769b01ea68b6c49dc3cde6adf7e53927dacbd3a8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/945ebef997227ca8c20bad7f8a8358c8ee57a84a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9b367fe770b1b80d7bf64ed0d177544a44405f6e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9d280ab53df1d4a1043bd7a9e7c6a2f9cfbfe040", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b287521e9e94bb342ebe5fd8c3fd7db9aef4e6f1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d34fb628f6ef522f996205a9e578216bbee09e84", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e411df81cd862ef3d5b878120b2a2fef0ca9cdb1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f299522eda1566cbfbae4b15c82970fc41b03714", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47170.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47170.json index df4b83d947c..091633e9ef5 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47170.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47170.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47170", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:08.870", - "lastModified": "2024-11-21T06:35:32.790", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:03:13.297", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,166 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: USB: usbfs: No ADVERTIR sobre asignaciones de memoria excesivamente grandes. Syzbot descubri\u00f3 que el kernel genera una ADVERTENCIA si el usuario intenta enviar una transferencia masiva a trav\u00e9s de usbfs con un b\u00fafer demasiado grande. Esto no es un error en el kernel; es simplemente una solicitud no v\u00e1lida del usuario y el c\u00f3digo usbfs la maneja correctamente. En teor\u00eda, lo mismo puede suceder con las transferencias as\u00edncronas o con la tabla de descriptores de paquetes para transferencias is\u00f3cronas. Para evitar que el subsistema MM se queje de estas solicitudes de asignaci\u00f3n incorrectas, agregue el indicador __GFP_NOWARN a las llamadas kmalloc para estos b\u00faferes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.19.193", + "matchCriteriaId": "A3FDF344-70E4-41FE-8424-F05D70B8DC0F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.124", + "matchCriteriaId": "06FE0F99-F7A9-462A-8355-30E2EDA9826B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.42", + "matchCriteriaId": "C3E7E799-1C8A-45FB-9E07-4731996144C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2ab21d6e1411999b5fb43434f421f00bf50002eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2c835fede13e03f2743a333e4370b5ed2db91e83", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f2629ea67e7225c3fd292c7fe4f5b3c9d6392de", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8d83f109e920d2776991fa142bb904d985dca2ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9f7cb3f01a10d9064cf13b3d26fb7e7a5827d098", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ab21d6e1411999b5fb43434f421f00bf50002eb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2c835fede13e03f2743a333e4370b5ed2db91e83", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f2629ea67e7225c3fd292c7fe4f5b3c9d6392de", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8d83f109e920d2776991fa142bb904d985dca2ed", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9f7cb3f01a10d9064cf13b3d26fb7e7a5827d098", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47174.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47174.json index 158b34766a4..e82d598ba0e 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47174.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47174.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47174", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:09.060", - "lastModified": "2024-11-21T06:35:33.423", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:03:04.400", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,125 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: netfilter: nft_set_pipapo_avx2: agregar verificaci\u00f3n irq_fpu_usable(), respaldo a una versi\u00f3n que no sea AVX2 Arturo inform\u00f3 este seguimiento: [709732.358791] ADVERTENCIA: CPU: 3 PID: 456 en arch/x86/kernel /fpu/core.c:128 kernel_fpu_begin_mask+0xae/0xe0 [709732.358793] M\u00f3dulos vinculados en: binfmt_misc nft_nat nft_chain_nat nf_nat nft_counter nft_ct nf_tables nf_conntrack_netlink nfnetlink 8021q garp stp mrp ll c vrf intel_rapl_msr intel_rapl_common skx_edac nfit libnvdimm ipmi_ssif x86_pkg_temp_thermal intel_powerclamp coretemp crc32_pclmul mgag200 ghash_clmulni_intel drm_kms_helper cec aesni_intel drm libaes crypto_simd cryptd pegamento_helper mei_me dell_smbios iTCO_wdt evdev intel_pmc_bxt iTCO_vendor_support dcdbas pcspkr rapl dell_wmi_descriptor wmi_bmof sg i2c_algo_bit perro guardi\u00e1n mei acpi_ipmi ipmi_si bot\u00f3n nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ipmi_devintf ipmi_msghandler ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 dm_mod raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor sd_mod t10_pi crc_t10dif crct10dif_generic raid6_pq libcrc32c crc32c_generic raid1 raid0 multiruta lineal md_mod ahci libahci tg3 libata xhci_pci libphy xhci_hcd ptp usbcore crct10dif_pclmul crct10dif_common bnxt_en crc32c_intel scsi_mod [709732.358941] pps_core i2c_i801 lpc_ich i2c_ smbus wmi usb_common [709732.358957] CPU: 3 PID: 456 Comunicaciones: jbd2/dm-0-8 No contaminado 5.10 .0-0.bpo.5-amd64 #1 Debian 5.10.24-1~bpo10+1 [709732.358959] Nombre del hardware: Dell Inc. PowerEdge R440/04JN2K, BIOS 2.9.3 23/09/2020 [709732.358964] RIP: 0010:kernel_fpu_begin_mask+0xae/0xe0 [709732.358969] C\u00f3digo: ae 54 24 04 83 e3 01 75 38 48 8b 44 24 08 65 48 33 04 25 28 00 00 00 75 33 48 83 c4 10 5b c3 65 8a 05 5e 21 5e 76 84 c0 74 92 <0f> 0b eb 8e f0 80 4f 01 40 48 81 c7 00 14 00 00 e8 dd fb ff ff eb [709732.358972] RSP: 0018:ffffbb9700304740 EFLAGS: 00010202 [709 732.358976] RAX: 00000000000000001 RBX: 0000000000000003 RCX: 0000000000000001 [709732.358979] RDX: ffffbb9700304970 RSI: ffff922fe1952e00 RDI: 00000000000000003 [709732.358981] RBP: ffffbb9700304970 R08: ffff922fc868a600 R09: ffff922fc711e462 [709732.358984] R10: 000000000000005f R11: ffff922ff0b27180 R12: ffffbb9700304960 [709732.358987] R13: ffffbb9700304b08 R14: ffff922fc664b6c8 R15: ffff922fc664b660 [ 709732.358990] FS: 0000000000000000(0000) GS:ffff92371fec0000(0000) knlGS:0000000000000000 [709732.358993] CS: 0010 DS: 0000 ES: 0000 CR0: 00 00000080050033 [709732.358996] CR2: 0000557a6655bdd0 CR3: 000000026020a001 CR4: 00000000007706e0 [709732.358999] DR0: 00000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [709732.359001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [709732.3590 03] PKRU: 55555554 [709732.359005] Seguimiento de llamadas: [709732.359009] [709732.359035] nft_pipapo_avx2_lookup+0x4c/0x1cba [nf_tables] [709732.359046] ? sched_clock+0x5/0x10 [709732.359054] ? sched_clock_cpu+0xc/0xb0 [709732.359061] ? record_times+0x16/0x80 [709732.359068] ? plist_add+0xc1/0x100 [709732.359073] ? psi_group_change+0x47/0x230 [709732.359079] ? skb_clone+0x4d/0xb0 [709732.359085] ? enqueue_task_rt+0x22b/0x310 [709732.359098] ? bnxt_start_xmit+0x1e8/0xaf0 [bnxt_es] [709732.359102] ? paquete_rcv+0x40/0x4a0 [709732.359121] nft_lookup_eval+0x59/0x160 [nf_tables] [709732.359133] nft_do_chain+0x350/0x500 [nf_tables] [709732.359152] ? nft_lookup_eval+0x59/0x160 [nf_tables] [709732.359163] ? nft_do_chain+0x364/0x500 [nf_tables] [709732.359172]? fib4_rule_action+0x6d/0x80 [709732.359178] ? fib_rules_lookup+0x107/0x250 [709732.359184] nft_nat_do_chain+0x8a/0xf2 [nft_chain_nat] [709732.359193] nf_nat_inet_fn+0xea/0x210 [nf_nat] [709732.359202 ] nf_nat_ipv4_out+0x14/0xa0 [nf_nat] [709732.359207] nf_hook_slow+0x44/0xc0 [709732.359214] salida_ip +0xd2/0x100 [709732.359221] ? __ip_finish_output+0x210/0x210 [709732.359226] ip_forward+0x37d/0x4a0 [709732.359232] ? ip4_key_hashfn+0xb0/0xb0 [709732.359238] ip_subli ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.7", + "versionEndExcluding": "5.10.42", + "matchCriteriaId": "80071323-2D44-440B-A37F-B00E96F0C8C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/727a2b4fc951ee69847d4904d98961856ea9fbe6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1f45a26bd322525c14edd9504f6d46dfad679a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f0b3d338064e1fe7531f0d2977e35f3b334abfb4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/727a2b4fc951ee69847d4904d98961856ea9fbe6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1f45a26bd322525c14edd9504f6d46dfad679a4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f0b3d338064e1fe7531f0d2977e35f3b334abfb4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47175.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47175.json index 67d5ac257f5..b633a85ae1a 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47175.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47175.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47175", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:09.110", - "lastModified": "2024-11-21T06:35:33.540", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:02:54.260", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,125 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/sched: fq_pie: arregla el acceso OOB en la ruta de tr\u00e1fico el siguiente script: # tc qdisc add dev eth0 handle 0x1 root fq_pie flows 2 # tc qdisc add dev eth0 clsact # tc filtrar agregar dev eth0 salida matchall acci\u00f3n skbedit prioridad 0x10002 # ping 192.0.2.2 -I eth0 -c2 -w1 -q produce el siguiente s\u00edmbolo: ERROR: KASAN: slab-out-of-bounds in fq_pie_qdisc_enqueue+0x1314/0x19d0 [sch_fq_pie] Leer de tama\u00f1o 4 en la direcci\u00f3n ffff888171306924 por tarea ping/942 CPU: 3 PID: 942 Comm: ping Not tainted 5.12.0+ #441 Nombre de hardware: Red Hat KVM, BIOS 1.11.1-4.module+el8.1.0+4066+ 0f1aadab 01/04/2014 Seguimiento de llamadas: dump_stack+0x92/0xc1 print_address_description.constprop.7+0x1a/0x150 kasan_report.cold.13+0x7f/0x111 fq_pie_qdisc_enqueue+0x1314/0x19d0 [sch_fq_pie] __dev_queue_x mit+0x1034/0x2b10 ip_finish_output2+0xc62/0x2120 __ip_finish_output+0x553/0xea0 ip_output+0x1ca/0x4d0 ip_send_skb+0x37/0xa0 raw_sendmsg+0x1c4b/0x2d00 sock_sendmsg+0xdb/0x110 __sys_sendto+0x1d7/0x2b0 __x64_sys_s endto+0xdd/0x1b0 do_syscall_64+0x3c/0x80 Entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fe69735c3eb C\u00f3digo: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f3 0f 1e fa 48 8d 05 75 42 2c 00 41 89 ca 8b 00 85 c0 75 14 b8 2c 00 00 00 0f 05 <48 > 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 41 57 4d 89 c7 41 56 41 89 RSP: 002b:00007fff06d7fb38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055e961413700 RCX: 00007fe69735c3eb RDX: 0000000000000040 RSI: 000055e961413700 RDI: 0000000000000003 RBP: 0000000000000040 R08: 000055e961410500 R09: 00000000000000010 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff06d81260 R13: 00007fff06d7fb40 R14: 00007fff06d7fc30 R15: 000055e96140f0a0 Asignado por la tarea 917: kasan_save_stack+0x19/0x40 __kasan_kmalloc+0x7f/0xa0 __kmalloc_node+0x139/0x280 fq_pie_init+0x555/0x8e8 [ sch_fq_pie] qdisc_create+0x407/0x11b0 tc_modify_qdisc+0x3c2/0x17e0 rtnetlink_rcv_msg+0x346/0x8e0 netlink_rcv_skb+0x120/0x380 netlink_unicast+0x439/0x630 netlink_sendmsg+0x719/ 0xbf0 sock_sendmsg+0xe2/0x110 ____sys_sendmsg+0x5ba/0x890 ___sys_sendmsg+0xe9/0x160 __sys_sendmsg+0xd3 /0x170 do_syscall_64+0x3c/0x80 Entry_SYSCALL_64_after_hwframe+0x44/0xae La direcci\u00f3n con errores pertenece al objeto en ffff888171306800 que pertenece al cach\u00e9 kmalloc-256 de tama\u00f1o 256. La direcci\u00f3n con errores se encuentra 36 bytes a la derecha de la regi\u00f3n de 256 bytes [ffff888171306 800, ffff888171306900) La direcci\u00f3n del error pertenece a la p\u00e1gina: p\u00e1gina:00000000bcfb624e refcount:1 mapcount:0 mapeo:0000000000000000 index:0x0 pfn:0x171306 head:00000000bcfb624e order:1 composite_mapcount:0 flags: 0x17ffffc00 10200(losa|cabeza|nodo=0|zona =2|lastcpupid=0x1fffff) raw: 0017ffffc0010200 dead000000000100 dead000000000122 ffff888100042b40 raw: 000000000000000000 0000000000100010 00000001ffffffff 0000000000000000 p\u00e1gina volcada porque: kasan: se detect\u00f3 mal acceso Estado de la memoria alrededor de la direcci\u00f3n con errores: ffff888171306800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff888171306880: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc >ffff888171306900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff888 171306980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888171306a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb corrige la ruta de tr\u00e1fico fq_pie para evitar seleccionar 'q->flows + q->flows_cnt' como un flujo v\u00e1lido: es una direcci\u00f3n m\u00e1s all\u00e1 de la memoria asignada." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "5.10.42", + "matchCriteriaId": "E3E2EC44-45C1-4B05-8C62-77FF73DE23CA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/7a1bdec12e43e29cc34a4394590337069d8812ce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e6294c06e7c62ffdd5bf3df696d3a4fcbb753d3c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e70f7a11876a1a788ceadf75e9e5f7af2c868680", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a1bdec12e43e29cc34a4394590337069d8812ce", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e6294c06e7c62ffdd5bf3df696d3a4fcbb753d3c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e70f7a11876a1a788ceadf75e9e5f7af2c868680", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47176.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47176.json index e22e7f710f1..9cf304544d4 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47176.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47176.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47176", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:09.163", - "lastModified": "2024-11-21T06:35:33.660", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:02:42.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,146 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: s390/dasd: agregar funci\u00f3n de disciplina faltante. Se corrigi\u00f3 falla con excepci\u00f3n de operaci\u00f3n ilegal en dasd_device_tasklet. El commit b72949328869 (\"s390/dasd: Prep\u00e1rese para el manejo de eventos de ruta adicional\") cambi\u00f3 el nombre de la funci\u00f3n verificar_ruta para ECKD pero no para Log\u00edstica de Amazon y DIAG. Esto provoca p\u00e1nico cuando se llama a la funci\u00f3n de verificaci\u00f3n de ruta para un dispositivo FBA o DIAG. Para solucionarlo, defina una funci\u00f3n contenedora para dasd_generic_verify_path()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.235", + "versionEndExcluding": "5.4.237", + "matchCriteriaId": "2D0F9F61-8180-4EA8-AFE6-549771B94476" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.173", + "versionEndExcluding": "5.10.175", + "matchCriteriaId": "13FA8FE7-E651-4DA8-BDB8-D999E5FF80F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/6a16810068e70959bc1df686424aa35ce05578f1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a16be88a3d7e5efcb59a15edea87a8bd369630c6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa8579bc084673c651204f7cd0d6308a47dffc16", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c0c8a8397fa8a74d04915f4d3d28cb4a5d401427", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6a16810068e70959bc1df686424aa35ce05578f1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a16be88a3d7e5efcb59a15edea87a8bd369630c6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa8579bc084673c651204f7cd0d6308a47dffc16", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c0c8a8397fa8a74d04915f4d3d28cb4a5d401427", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47177.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47177.json index fd922b315e8..a997395d73c 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47177.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47177.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47177", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:09.213", - "lastModified": "2024-11-21T06:35:33.777", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:20:45.187", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,55 +15,188 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: iommu/vt-d: corrige la fuga de sysfs en alloc_iommu() iommu_device_sysfs_add() se llama antes, por lo que debe limpiarse en caso de errores posteriores." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.11", + "versionEndExcluding": "4.14.235", + "matchCriteriaId": "9DBCCCAA-0221-4A46-98C3-C8894CE8057F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.193", + "matchCriteriaId": "C8DEF3EC-88D9-4B89-8CF9-64BD6C863C9D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.124", + "matchCriteriaId": "06FE0F99-F7A9-462A-8355-30E2EDA9826B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.42", + "matchCriteriaId": "C3E7E799-1C8A-45FB-9E07-4731996144C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/044bbe8b92ab4e542de7f6c93c88ea65cccd8e29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0ee74d5a48635c848c20f152d0d488bf84641304", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22da9f4978381a99f1abaeaf6c9b83be6ab5ddd8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ec5e9bb6b0560c90d315559c28a99723c80b996", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ca466561eef36d1ec657673e3944eb6340bddb5b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f01134321d04f47c718bb41b799bcdeda27873d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/044bbe8b92ab4e542de7f6c93c88ea65cccd8e29", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0ee74d5a48635c848c20f152d0d488bf84641304", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22da9f4978381a99f1abaeaf6c9b83be6ab5ddd8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ec5e9bb6b0560c90d315559c28a99723c80b996", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ca466561eef36d1ec657673e3944eb6340bddb5b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f01134321d04f47c718bb41b799bcdeda27873d2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-471xx/CVE-2021-47178.json b/CVE-2021/CVE-2021-471xx/CVE-2021-47178.json index a6a731d3c82..126e0d30813 100644 --- a/CVE-2021/CVE-2021-471xx/CVE-2021-47178.json +++ b/CVE-2021/CVE-2021-471xx/CVE-2021-47178.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47178", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-25T10:15:09.267", - "lastModified": "2024-11-21T06:35:33.900", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:20:33.717", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,118 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: target: core: Evite smp_processor_id() en c\u00f3digo interrumpible Se observ\u00f3 el mensaje de ERROR \"ERROR: usar smp_processor_id() en c\u00f3digo interrumpible [00000000]\" para dispositivos TCMU con configuraci\u00f3n de kernel DEBUG_PREEMPT. El mensaje se observ\u00f3 cuando se ejecut\u00f3 blktests block/005 en dispositivos TCMU con backend fileio o usuario:zbc [1]. La confirmaci\u00f3n 1130b499b4a7 (\"scsi: target: tcm_loop: Use el asistente de env\u00edo LIO wq cmd\") desencaden\u00f3 el s\u00edntoma. La confirmaci\u00f3n modific\u00f3 la cola de trabajo para manejar comandos y cambi\u00f3 'current->nr_cpu_allowed' en la llamada a smp_processor_id(). El mensaje tambi\u00e9n se observ\u00f3 al apagar el sistema cuando los dispositivos TCMU no se limpiaron [2]. La funci\u00f3n smp_processor_id() fue llamada en la cola de trabajo del host SCSI para el manejo de abortos y activ\u00f3 el mensaje de ERROR. Este s\u00edntoma se observ\u00f3 independientemente de la confirmaci\u00f3n 1130b499b4a7 (\"scsi: target: tcm_loop: Use el asistente de env\u00edo LIO wq cmd\"). Para evitar la verificaci\u00f3n del c\u00f3digo interrumpible en smp_processor_id(), obtenga el ID de la CPU con raw_smp_processor_id() en su lugar. El ID de la CPU se utiliza para mejorar el rendimiento, luego el movimiento del subproceso a otra CPU no afectar\u00e1 el c\u00f3digo. [1] [56.468103] ejecute blktests block/005 el 2021-05-12 14:16:38 [57.369473] check_preemption_disabled: 85 devoluciones de llamada suprimidas [57.369480] ERROR: usar smp_processor_id() en c\u00f3digo preferente [00000000]: fio/151 1 [ 57.369506] ERROR: usar smp_processor_id() en c\u00f3digo interrumpible [00000000]: fio/1510 [57.369512] ERROR: usar smp_processor_id() en c\u00f3digo interrumpible [00000000]: fio/1506 [57.369552] la persona que llama es __target_init_cmd+0 x157/0x170 [objetivo_core_mod] [ 57.369606] CPU: 4 PID: 1506 Comm: fio Not tainted 5.13.0-rc1+ #34 [ 57.369613] Nombre del hardware: Fabricante del sistema Nombre del producto del sistema/PRIME Z270-A, BIOS 1302 15/03/2018 [ 57.369617] Seguimiento de llamadas : [57.369621] ERROR: usar smp_processor_id() en c\u00f3digo interrumpible [00000000]: fio/1507 [57.369628] dump_stack+0x6d/0x89 [57.369642] check_preemption_disabled+0xc8/0xd0 [57.369628] la persona que llama es __ target_init_cmd+0x157/0x170 [target_core_mod] [ 57.369655] __target_init_cmd+0x157/0x170 [target_core_mod] [ 57.369695] target_init_cmd+0x76/0x90 [target_core_mod] [ 57.369732] tcm_loop_queuecommand+0x109/0x210 [tcm_loop] [ 57 .369744] scsi_queue_rq+0x38e/0xc40 [ 57.369761] __blk_mq_try_issue_directly+0x109/0x1c0 [ 57.369779 ] blk_mq_try_issue_directly+0x43/0x90 [ 57.369790] blk_mq_submit_bio+0x4e5/0x5d0 [ 57.369812] submit_bio_noacct+0x46e/0x4e0 [ 57.369830] __blkdev_direct_IO_simple+0x1a3/0x2 d0 [57.369859]? set_init_blocksize.isra.0+0x60/0x60 [ 57.369880] generic_file_read_iter+0x89/0x160 [ 57.369898] blkdev_read_iter+0x44/0x60 [ 57.369906] new_sync_read+0x102/0x170 [ 57.369929 ] vfs_read+0xd4/0x160 [ 57.369941] __x64_sys_pread64+0x6e/0xa0 [ 57.369946] ? lockdep_hardirqs_on+0x79/0x100 [ 57.369958] do_syscall_64+0x3a/0x70 [ 57.369965] Entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.369973] RIP: 0033:0x7f7ed4c1399f [ 5 7.369979] C\u00f3digo: 08 89 3c 24 48 89 4c 24 18 e8 7d f3 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 11 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 cd f3 ff ff 48 8b [ 57.369983] RSP: 002b:00007ffd7918c580 EFLAGS: 00000293 ORIG_RAX: 0000000000000011 [ 57.369990] RAX: fffffffffffffffda RBX: 00000000015b4540 RCX: 00 007f7ed4c1399f [ 57.369993] RDX: 0000000000001000 RSI: 00000000015de000 RDI: 000000000000000009 [ 57.369996] RBP: 00000000015b4540 R08: 000 0000000000000 R09: 0000000000000001 [ 57.369999] R10: 0000000000e5c000 R11: 0000000000000293 R12: 00007f7eb5269a70 [ 57.370002] R13: 00000000000000000 R14: 000000000000 1000 R15: 00000000015b4568 [57.370031] CPU: 7 PID: 1507 ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-459" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.12.9", + "matchCriteriaId": "2C8A1D02-81A7-44E5-ACFD-CC6A6694F930" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DA610E30-717C-4700-9F77-A3C9244F3BFD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/70ca3c57ff914113f681e657634f7fbfa68e1ad1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a20b6eaf4f35046a429cde57bee7eb5f13d6857f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a222d2794c53f8165de20aa91b39e35e4b72bce9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/70ca3c57ff914113f681e657634f7fbfa68e1ad1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a20b6eaf4f35046a429cde57bee7eb5f13d6857f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a222d2794c53f8165de20aa91b39e35e4b72bce9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-09xx/CVE-2022-0959.json b/CVE-2022/CVE-2022-09xx/CVE-2022-0959.json index 843ac8fff59..b15953be7c0 100644 --- a/CVE-2022/CVE-2022-09xx/CVE-2022-0959.json +++ b/CVE-2022/CVE-2022-09xx/CVE-2022-0959.json @@ -2,7 +2,7 @@ "id": "CVE-2022-0959", "sourceIdentifier": "secalert@redhat.com", "published": "2022-03-16T15:15:16.213", - "lastModified": "2024-11-21T06:39:44.797", + "lastModified": "2025-03-17T16:46:07.940", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -99,9 +99,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:postgresql:pgadmin_4:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.7", - "matchCriteriaId": "35D2D5A6-42B4-445F-96D8-0367748000DA" + "matchCriteriaId": "7E3AB162-68DB-49D6-B243-0C6C6A89BDD4" } ] } diff --git a/CVE-2022/CVE-2022-11xx/CVE-2022-1153.json b/CVE-2022/CVE-2022-11xx/CVE-2022-1153.json index 8409ae6c18a..da309206448 100644 --- a/CVE-2022/CVE-2022-11xx/CVE-2022-1153.json +++ b/CVE-2022/CVE-2022-11xx/CVE-2022-1153.json @@ -2,7 +2,7 @@ "id": "CVE-2022-1153", "sourceIdentifier": "contact@wpscan.com", "published": "2022-04-25T16:16:08.517", - "lastModified": "2024-11-21T06:40:08.570", + "lastModified": "2025-03-17T16:58:36.687", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -85,9 +85,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:layslider:layslider:*:*:*:*:*:wordpress:*:*", + "criteria": "cpe:2.3:a:kreaturamedia:layerslider:*:*:*:*:*:wordpress:*:*", "versionEndExcluding": "7.1.2", - "matchCriteriaId": "B69E8C27-DCA1-4CBD-9380-1AD3806487C4" + "matchCriteriaId": "248E23A0-5473-4A50-8440-8C83E4A4CD56" } ] } diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49441.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49441.json index 5bf24f77868..e25265070f6 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49441.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49441.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49441", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:20.523", - "lastModified": "2025-02-26T07:01:20.523", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:58.013", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,187 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: se corrige el bloqueo causado por llamar a printk() bajo tty_port->lock pty_write() invoca kmalloc() que puede invocar un printk() normal para imprimir un mensaje de error. Esto puede causar un bloqueo en el escenario informado por syz-bot a continuaci\u00f3n: CPU0 CPU1 CPU2 ---- ---- ---- lock(console_owner); lock(&port_lock_key); lock(&port->lock); lock(&port_lock_key); lock(&port->lock); lock(console_owner); Como dijo el commit dbdda842fe96 (\"printk: Agregar l\u00f3gica de propietario y espera de consola para equilibrar la carga de escrituras de consola\"), dicho bloqueo se puede prevenir usando printk_deferred() en kmalloc() (que se invoca en la secci\u00f3n protegida por port->lock). Pero hay demasiados printk() en la ruta kmalloc() y kmalloc() se puede llamar desde cualquier lugar, por lo que cambiar printk() a printk_deferred() es demasiado complicado y poco elegante. Por lo tanto, este parche elige especificar __GFP_NOWARN en kmalloc(), de modo que no se llame a printk() y se pueda evitar este problema de bloqueo. Syzbot inform\u00f3 el siguiente error de lockdep: ======================================================== ADVERTENCIA: posible dependencia de bloqueo circular detectada 5.4.143-00237-g08ccc19a-dirty #10 Not tainted ------------------------------------------------------ syz-executor.4/29420 is trying to acquire lock: ffffffff8aedb2a0 (console_owner){....}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:1752 [inline] ffffffff8aedb2a0 (console_owner){....}-{0:0}, at: vprintk_emit+0x2ca/0x470 kernel/printk/printk.c:2023 but task is already holding lock: ffff8880119c9158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xf4/0x1f0 drivers/tty/pty.c:120 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&port->lock){-.-.}-{2:2}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x35/0x50 kernel/locking/spinlock.c:159 tty_port_tty_get drivers/tty/tty_port.c:288 [inline] <-- lock(&port->lock); tty_port_default_wakeup+0x1d/0xb0 drivers/tty/tty_port.c:47 serial8250_tx_chars+0x530/0xa80 drivers/tty/serial/8250/8250_port.c:1767 serial8250_handle_irq.part.0+0x31f/0x3d0 drivers/tty/serial/8250/8250_port.c:1854 serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1827 [inline] <-- lock(&port_lock_key); serial8250_default_handle_irq+0xb2/0x220 drivers/tty/serial/8250/8250_port.c:1870 serial8250_interrupt+0xfd/0x200 drivers/tty/serial/8250/8250_core.c:126 __handle_irq_event_percpu+0x109/0xa50 kernel/irq/handle.c:156 [...] -> #1 (&port_lock_key){-.-.}-{2:2}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x35/0x50 kernel/locking/spinlock.c:159 serial8250_console_write+0x184/0xa40 drivers/tty/serial/8250/8250_port.c:3198 <-- lock(&port_lock_key); call_console_drivers kernel/printk/printk.c:1819 [inline] console_unlock+0x8cb/0xd00 kernel/printk/printk.c:2504 vprintk_emit+0x1b5/0x470 kernel/printk/printk.c:2024 <-- lock(console_owner); vprintk_func+0x8d/0x250 kernel/printk/printk_safe.c:394 printk+0xba/0xed kernel/printk/printk.c:2084 register_console+0x8b3/0xc10 kernel/printk/printk.c:2829 univ8250_console_init+0x3a/0x46 drivers/tty/serial/8250/8250_core.c:681 console_init+0x49d/0x6d3 kernel/printk/printk.c:2915 start_kernel+0x5e9/0x879 init/main.c:713 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241 -> #0 (console_owner){....}-{0:0}: [...] lock_acquire+0x127/0x340 kernel/locking/lockdep.c:4734 console_trylock_spinning kernel/printk/printk.c:1773 ---truncated--- " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.18.118", + "versionEndExcluding": "3.19", + "matchCriteriaId": "3E38B3B3-C9B4-4F8E-B27F-E121FA35D422" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4.146", + "versionEndExcluding": "4.5", + "matchCriteriaId": "9F7ABD11-7E25-4617-AD4B-2068A90C7EF8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9.117", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "FF4DA68C-0A82-4061-AEA7-59632762D9E2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14.60", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "378D8F4C-4F16-4488-9872-625DEA9B337A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.17.12", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "A0236C89-21F4-4889-AA04-D7985FBBD23F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/04ee31678c128a6cc7bb057ea189a8624ba5a314", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0bcf44903ef4df742dcada86ccaedd25374ffb50", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/18ca0d55e8639b911df8aae1b47598b13f9acded", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3219ac364ac3d8d30771612a6010f1e0b7fa0a28", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4af21b12a60ed2d3642284f4f85b42d7dc6ac246", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4c253caf9264d2aa47ee806a87986dd8eb91a5d9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6b9dbedbe3499fef862c4dff5217cf91f34e43b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9834b13e8b962caa28fbcf1f422dd82413da4ede", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b3c974501d0c32258ae0e04e5cc3fb92383b40f6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49443.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49443.json index bdb1235472f..1fc0a21aee6 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49443.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49443.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49443", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:20.730", - "lastModified": "2025-02-26T07:01:20.730", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:46.963", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: list: se corrige una ejecuci\u00f3n de datos alrededor de ep->rdllist ep_poll() primero llama a ep_events_available() sin bloqueo mantenido y verifica si ep->rdllist est\u00e1 vac\u00edo mediante list_empty_careful(), que lee rdllist->prev. Por lo tanto, todos los accesos a \u00e9l necesitan alguna protecci\u00f3n para evitar el desgarro de almacenamiento/carga. Tenga en cuenta que INIT_LIST_HEAD_RCU() ya tiene la anotaci\u00f3n tanto para prev como para next. El commit bf3b9f6372c4 (\"epoll: Agregar soporte de sondeo ocupado a epoll con fds de socket\") agreg\u00f3 el primer ep_events_available() sin bloqueo, y el commit c5a282e9635e (\"fs/epoll: reducir el alcance del bloqueo wq en epoll_wait()\") hizo que algunas llamadas ep_events_available() no tuvieran bloqueo y agreg\u00f3 una sola llamada bajo un bloqueo, finalmente el commit e59d3c64cba6 (\"epoll: eliminar el bloqueo innecesario para tiempo de espera cero\") hizo que el \u00faltimo ep_events_available() no tuviera bloqueo. ERROR: KCSAN: data-race in do_epoll_wait / do_epoll_wait write to 0xffff88810480c7d8 of 8 bytes by task 1802 on cpu 0: INIT_LIST_HEAD include/linux/list.h:38 [inline] list_splice_init include/linux/list.h:492 [inline] ep_start_scan fs/eventpoll.c:622 [inline] ep_send_events fs/eventpoll.c:1656 [inline] ep_poll fs/eventpoll.c:1806 [inline] do_epoll_wait+0x4eb/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae read to 0xffff88810480c7d8 of 8 bytes by task 1799 on cpu 1: list_empty_careful include/linux/list.h:329 [inline] ep_events_available fs/eventpoll.c:381 [inline] ep_poll fs/eventpoll.c:1797 [inline] do_epoll_wait+0x279/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae value changed: 0xffff88810480c7d0 -> 0xffff888103c15098 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 1799 Comm: syz-fuzzer Tainted: G W 5.17.0-rc7-syzkaller-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.12", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "1C85B4FC-DF18-4C4C-AA30-7705B44192E5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5d5d993f16be15d124be7b8ec71b28ef7b7dc3af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb3e48f7a35033deb9455abe3932e63cb500b9eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d679ae94fdd5d3ab00c35078f5af5f37e068b03d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e039c0b5985999b150594126225e1ee51df7b4c9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49445.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49445.json index b4526fbd01b..4cbf3e23298 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49445.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49445.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49445", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:20.913", - "lastModified": "2025-02-26T07:01:20.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:12:59.620", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pinctrl: renesas: core: Se corrige la posible eliminaci\u00f3n de referencias PTR nulas en sh_pfc_map_resources(). Esto provocar\u00e1 una eliminaci\u00f3n de referencias PTR nulas al usar 'res', si platform_get_resource() devuelve NULL, por lo que se debe mover el uso de 'res' despu\u00e9s de devm_ioremap_resource() que lo comprobar\u00e1 para evitar la eliminaci\u00f3n de referencias PTR nulas. Y se utiliza devm_platform_get_and_ioremap_resource() para simplificar el c\u00f3digo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.3", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "58ABA7F2-1CE0-49CE-8C4F-E4D81B7E87D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5376e3d904532e657fd7ca1a9b1ff3d351527b90", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5ed0519d425619b435150372cce2ffeec71581fa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3a1ad8fd0ac11f4fa1260c23b5db71a25473254", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f991879762392c19661af5b722578089a12b305f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fb4f022b3ad1f3ff3cafdbc7d51896090ae17701", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49446.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49446.json index e550e3060c6..6bd0d2b8836 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49446.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49446.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49446", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.010", - "lastModified": "2025-02-26T07:01:21.010", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:12:47.283", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvdimm: Se corrigen los escenarios de bloqueo de activaci\u00f3n de firmware Lockdep informa los siguientes escenarios de bloqueo para la administraci\u00f3n de energ\u00eda del dispositivo ra\u00edz CXL, device_prepare(), operaciones y operaciones device_shutdown() para dispositivos 'nd_region': Existe una cadena de: &nvdimm_region_key --> &nvdimm_bus->reconfig_mutex --> system_transition_mutex Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(system_transition_mutex); lock(&nvdimm_bus->reconfig_mutex); lock(system_transition_mutex); lock(&nvdimm_region_key); Chain exists of: &cxl_nvdimm_bridge_key --> acpi_scan_lock --> &cxl_root_key Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&cxl_root_key); lock(acpi_scan_lock); lock(&cxl_root_key); lock(&cxl_nvdimm_bridge_key); Estos se derivan de mantener nvdimm_bus_lock() sobre hibernate_quiet_exec() que recorre toda la topolog\u00eda del dispositivo del sistema tomando device_lock() en el camino. nvdimm_bus_lock() protege contra la anulaci\u00f3n del registro, m\u00faltiples invocadores de operaciones simult\u00e1neas y evita que activate_show() compita con activate_store(). Para los primeros 2, el bloqueo es redundante. La anulaci\u00f3n del registro ya borra todos los usuarios de operaciones, y sysfs ya evita que varios subprocesos est\u00e9n activos en un controlador de operaciones al mismo tiempo. Para el \u00faltimo espacio de usuario ya deber\u00eda estar esperando a que se complete su \u00faltimo activate_store(), y no necesita activate_show() para borrar el lado de escritura, por lo que este uso de bloqueo se puede eliminar en estos atributos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "D72A0A66-110A-4144-A452-8FE84D5A41C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2f97ebc58d5fc83ca1528cd553fa725472ab3ca8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fd853fdb40afc052de338693df1372f2ead7be7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/641649f31e20df630310f5c22f26c071acc676d4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ceb924ee16b2c8e48dcac3d9ad6be01c40b5a228", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e6829d1bd3c4b58296ee9e412f7ed4d6cb390192", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49447.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49447.json index adef6a278fd..994fb15cdd6 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49447.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49447.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49447", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.103", - "lastModified": "2025-02-26T07:01:21.103", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:12:39.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,172 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ARM: hisi: Agregar la falta de of_node_put despu\u00e9s de of_find_compatible_node of_find_compatible_node incrementar\u00e1 el recuento de referencias del device_node devuelto. Llamar a of_node_put() para evitar la p\u00e9rdida de recuento de referencias" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "0D4D4067-974D-4560-8320-22FDA399E3F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/21a3effe446dd6dc5eed7fe897c2f9b88c9a5d6d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/45d211668d33c49d73f5213e8c2b58468108647c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/46cb7868811d025c3d29c10d18b3422db1cf20d5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9bc72e47d4630d58a840a66a869c56b29554cfe4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3265a9440030068547a20dfee646666f3ca5278", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cafaaae4bb9ce84a2791fa29bf6907a9466c3883", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd4be8ecfb41a29e7c4e551b4e866157ce4a3429", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e109058165137ef42841abd989f080adfefa14fa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8da78b2bae1f54746647a2bb44f8bd6025c57af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49448.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49448.json index 6e6c3d02ae1..27970312f80 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49448.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49448.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49448", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.200", - "lastModified": "2025-02-26T07:01:21.200", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:12:30.140", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: soc: bcm: Verificar el retorno NULL de devm_kzalloc() Como posible fallo de asignaci\u00f3n, devm_kzalloc() puede devolver NULL. Entonces, 'pd->pmb' y las siguientes l\u00edneas de c\u00f3digo pueden generar una desreferencia de puntero nulo. Por lo tanto, es mejor verificar el valor de retorno de devm_kzalloc() para evitar esta confusi\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.12", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "4B1B70ED-9D25-4914-8F22-87A4DFAD7934" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/36339ea7bae4943be01c8e9545e46e334591fecd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5650e103bfc70156001615861fb8aafb3947da6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b48b98743b568bb219152ba2e15af6ef0d3d8a9b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b4bd2aafacce48db26b0a213d849818d940556dd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49449.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49449.json index 4b50de51c66..88e108e7005 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49449.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49449.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49449", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.290", - "lastModified": "2025-02-26T07:01:21.290", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:12:23.147", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,116 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pinctrl: renesas: rzn1: Se corrige la posible eliminaci\u00f3n de referencias PTR nulas en sh_pfc_map_resources(). Esto provocar\u00e1 una eliminaci\u00f3n de referencias PTR nulas al usar 'res', si platform_get_resource() devuelve NULL, por lo que se debe mover el uso de 'res' despu\u00e9s de devm_ioremap_resource() que lo comprobar\u00e1 para evitar la eliminaci\u00f3n de referencias PTR nulas. Y se utiliza devm_platform_get_and_ioremap_resource() para simplificar el c\u00f3digo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "814C88C6-C31D-462A-BBBE-BC83E102E84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/01f9e02e0f13df3fd291676dc80054e977be1601", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2f661477c2bb8068194dbba9738d05219f111c6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/34c719b8fdfbd0c7c54cae56e6b0f16e9f8bf03e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b646e0cfeb38bf5f1944fd548f1dfa9b129fa00c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c16b59d445135c8026a04e388d8b2762feaa3b3b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49450.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49450.json index 09dbb95db86..afb009a79ab 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49450.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49450.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49450", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.390", - "lastModified": "2025-02-26T07:01:21.390", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:12:16.943", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rxrpc: Se corrige que listen() estableciera la barra demasiado alta para los anillos de preasignaci\u00f3n El controlador listen() de AF_RXRPC le permite establecer el backlog hasta 32 (si aumenta el sysctl), pero mientras que los b\u00faferes circulares de preasignaci\u00f3n tienen 32 ranuras en ellos, una de ellas tiene que ser una ranura muerta porque estamos usando CIRC_CNT(). Esto significa que listen(rxrpc_sock, 32) causar\u00e1 un oops cuando el socket se cierre porque rxrpc_service_prealloc_one() asign\u00f3 una llamada de m\u00e1s y rxrpc_discard_prealloc() no podr\u00e1 deshacerse de ellas porque pensar\u00e1 que el anillo est\u00e1 vac\u00edo. rxrpc_release_calls_on_socket() luego intenta abortarlas, pero falla porque call->peer a\u00fan no est\u00e1 configurado. Solucione esto configurando el backlog m\u00e1ximo en RXRPC_BACKLOG_MAX - 1 para que coincida con la capacidad del anillo. ERROR: desreferencia de puntero NULL del kernel, direcci\u00f3n: 0000000000000086 ... RIP: 0010:rxrpc_send_abort_packet+0x73/0x240 [rxrpc] Call Trace: ? __wake_up_common_lock+0x7a/0x90 ? rxrpc_notify_socket+0x8e/0x140 [rxrpc] ? rxrpc_abort_call+0x4c/0x60 [rxrpc] rxrpc_release_calls_on_socket+0x107/0x1a0 [rxrpc] rxrpc_release+0xc9/0x1c0 [rxrpc] __sock_release+0x37/0xa0 sock_close+0x11/0x20 __fput+0x89/0x240 task_work_run+0x59/0x90 do_exit+0x319/0xaa0 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "F66DA60C-48FB-4C0A-A8BD-EE00CAEBAAF6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/369de57492c4f1a42563c5a3bd365822ca3bfc79", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a3a78b7918bdd723d8c7c9786522ca969bffcc4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5b4826657d36c218e9f08e8d3223b0edce3de88f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/616f76498d5ddf26b997caf64a95cda3c8a55533", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/61fb38cfbb1d54d3dafd0c25752f684b3cd00b32", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/88e22159750b0d55793302eeed8ee603f5c1a95c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91b34bf0409f43bb60453bab23c5beadd726d022", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b3a9b227d5e7467b8518160ff034ea22bb9de573", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e198f1930050e3115c80b67d9249f80f98a27c67", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49451.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49451.json index 6462d7bbfd7..a7f63f5c6d5 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49451.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49451.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49451", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.490", - "lastModified": "2025-02-26T07:01:21.490", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:12:01.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,145 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: arm_scmi: Se corrige la enumeraci\u00f3n de protocolos de lista en el protocolo base Al enumerar protocolos implementados por la plataforma SCMI utilizando BASE_DISCOVER_LIST_PROTOCOLS, la cantidad de protocolos devueltos actualmente se valida de manera incorrecta ya que la verificaci\u00f3n emplea una suma entre n\u00fameros enteros sin signo que podr\u00eda desbordarse y hacer que la verificaci\u00f3n en s\u00ed se omita silenciosamente si el valor devuelto 'loop_num_ret' es lo suficientemente grande. Arregle la validaci\u00f3n evitando la suma." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.17", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "1D618A3C-AEC5-4520-BBDB-002AC8CA3FED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1052f22e127d0c34c3387bb389424ba1c61491ff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ccfcd7a09c826516edcfe464b05071961aada3f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/444a2d27fe9867d0da4b28fc45b793f32e099ab8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e7978695f4a6cbd83616b5a702b77fa2087b247", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8009120e0354a67068e920eb10dce532391361d0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98342148a8cd242855d7e257f298c966c96dba9f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b0e4bafac8963c2d85ee18d3d01f393735acceec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49453.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49453.json index ef35e7ab75b..5cc49240a46 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49453.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49453.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49453", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.673", - "lastModified": "2025-02-26T07:01:21.673", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:11:54.510", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,116 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: soc: ti: ti_sci_pm_domains: Verificaci\u00f3n de retorno nulo de devm_kcalloc La funci\u00f3n de asignaci\u00f3n devm_kcalloc puede fallar y devolver un puntero nulo, lo que provocar\u00eda una desreferencia de puntero nulo m\u00e1s adelante. Puede ser mejor verificarlo y devolver directamente -ENOMEM tal como se hizo con devm_kcalloc en el c\u00f3digo anterior." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "814C88C6-C31D-462A-BBBE-BC83E102E84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/01ba41a359622ab256ce4d4f8b94c67165ae3daf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/05efc4591f80582b6fe53366b70b6a35a42fd255", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7cef9274fa1b8506949d74bc45aef072b890824a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba56291e297d28aa6eb82c5c1964fae2d7594746", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c4e188869406b47ac3350920bf165be303cb1c96", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49454.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49454.json index 9a4b7ffbe2f..da4c7278570 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49454.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49454.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49454", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.767", - "lastModified": "2025-02-26T07:01:21.767", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:11:47.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: mediatek: Se corrige la p\u00e9rdida de recuento de referencias en mtk_pcie_subsys_powerup() La funci\u00f3n of_find_compatible_node() devuelve un puntero de nodo con el recuento de referencias incrementado. Deber\u00edamos usar of_node_put() en \u00e9l cuando termine. Agregue el of_node_put() faltante para liberar el recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "FA8369C7-8B08-4709-9CE6-2131C7668313" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/09b2d906d78ddf5042b1f3e0091835fc6997e8a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/214e0d8fe4a813ae6ffd62bc2dfe7544c20914f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4cef4237d6c37257cb6ddc397723e9c0dded0efe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ad1c9d13e04509ae24fae8dd2897148657323519", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49455.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49455.json index 4c4c802156a..50b61a3fe62 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49455.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49455.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49455", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:21.857", - "lastModified": "2025-02-26T07:01:21.857", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:11:40.500", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: misc: ocxl: se corrige la posible doble liberaci\u00f3n en ocxl_file_register_afu. Se llamar\u00e1 a info_release() en device_unregister() cuando el recuento de referencias de info->dev sea 0. Por lo tanto, no es necesario llamar a ocxl_afu_put() y kfree() nuevamente. Corrija esto agregando free_minor() y regrese a la ruta de error err_unregister." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "F6A5879C-3AE9-495A-9327-7D3101F7E358" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/252768d32e92c1214aeebb5fec0844ca479bcf5c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8fb674216835e1f0c143762696d645facebb4685", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/950cf957fe34d40d63dfa3bf3968210430b6491e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e9087cf34ee69f4e95d146ac29385d6e367a97b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de65c32ace9aa70d51facc61ba986607075e3a25", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee89d8dee55ab4b3b8ad8b70866b2841ba334767", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49457.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49457.json index 1400f01fcb5..56856aacfa7 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49457.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49457.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49457", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:22.043", - "lastModified": "2025-02-26T07:01:22.043", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:11:28.843", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,172 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ARM: vers\u00e1til: se agrega el valor of_node_put faltante en dcscb_init. El puntero device_node es devuelto por of_find_compatible_node con refcount incrementado. Deber\u00edamos usar of_node_put() para evitar la fuga de refcount." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "0D4D4067-974D-4560-8320-22FDA399E3F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/23b44f9c649bbef10b45fa33080cd8b4166800ae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2d7b23db35254b7d46e852967090c64cdccf24da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3c6006faed9aba5144b33176d061031a9be66954", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/83c329b980bddbc8c6a3d287d91f2103a4d4a860", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a0fc05cd17617e63fc13ad0c01f3f0afd890d8ec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bbdfb7d4f036118d36415a2575efa6f5246505ae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d146e2a9864ade19914494de3fb520390b415d58", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d6de7b181c29cd4578ec139aafb5eac062abbe1b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fcd1999ba97445a12cc394f5f42ffd9116bf0185", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49459.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49459.json index 1a851e926ca..36c39dd52ab 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49459.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49459.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49459", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:22.230", - "lastModified": "2025-02-26T07:01:22.230", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:10:56.770", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: thermal/drivers/broadcom: se corrige la posible desreferenciaci\u00f3n NULL en sr_thermal_probe. platform_get_resource() puede devolver NULL. Se agrega la verificaci\u00f3n adecuada para evitar una posible desreferenciaci\u00f3n NULL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.1", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "84841EA3-1E58-4870-AFC5-2D2CBD3C027C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/61621e042c22b47d1eadee617bdd26835294b425", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79098339ac2065f4b4352ef5921628970b6f47e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b3461ccaa5d2588568d865faee285512ad448049", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e20d136ec7d6f309989c447638365840d3424c8e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee9b6b02e8c140323ed46d6602d805ea735c7719", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef1235c6514a58f274246cf4a2d5f4e40af539ce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49461.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49461.json index a12546502e9..7129e770131 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49461.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49461.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49461", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:22.423", - "lastModified": "2025-02-26T07:01:22.423", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:10:31.453", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: amt: se corrige una p\u00e9rdida de memoria para un mensaje de publicidad. Cuando una puerta de enlace recibe un mensaje de publicidad, extrae informaci\u00f3n de retransmisi\u00f3n y luego deber\u00eda liberarse. Pero el controlador de publicidad no lo libera. Por lo tanto, se producir\u00eda una p\u00e9rdida de memoria." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/19bb2d57eac86a368839a92117d8a10ab7183623", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e7322da399fb86a2072f008b56f7160afa1b2051", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe29794c3585d039fefebaa2b5a4932a627ad4fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49462.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49462.json index 9da86049f85..008c4f39ec3 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49462.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49462.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49462", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:22.517", - "lastModified": "2025-02-26T07:01:22.517", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:10:17.393", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/a6xx: Se corrige la p\u00e9rdida de recuento de referencias en a6xx_gpu_init of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado, deber\u00edamos usar of_node_put() en \u00e9l cuando ya no lo necesitemos. a6xx_gmu_init() pasa el nodo a of_find_device_by_node() y of_dma_configure(), of_find_device_by_node() tomar\u00e1 su referencia, of_dma_configure() no necesita el nodo despu\u00e9s del uso. Agregue of_node_put() faltante para evitar la p\u00e9rdida de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "D57ED2A3-D50F-4DED-9126-E63D01D440FC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/06907a374f1b74f8f2fb30720dc6df81331e4fb5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/48e82ce8cdb19c20a5020fa446b286d6a147450c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65ddbc0d26824e2a5d6154d01d8cf39344900213", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6832e36f156ea35a6ed74bca72727806116effdd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c56de483093d7ad0782327f95dda7da97bc4c315", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/edff4c1af831d0c02e654eed9da7d74174de49d5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49463.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49463.json index 5ea65f413d6..aa7ec4609ad 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49463.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49463.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49463", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:22.603", - "lastModified": "2025-02-26T07:01:22.603", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:10:05.883", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: thermal/drivers/imx_sc_thermal: Se corrige la p\u00e9rdida de recuento de referencias en imx_sc_thermal_probe. of_find_node_by_name() devuelve un puntero de nodo con el recuento de referencias incrementado; cuando termine, debemos usar of_node_put() en \u00e9l. Se agrega el error of_node_put() faltante para evitar la p\u00e9rdida de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.7", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "18C96717-E9F3-4B1E-BDA0-C7C40BC13214" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/09700c504d8e63faffd2a2235074e8c5d130cb8f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0ec10303c10833c1bcba7a1bde2f297e494d5464", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ade442ea5d3512a3c67984489ab4d8a6fb3b29f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8bbf522a2c51ef939d0e8835e236bfcd252193af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec0925b731697db7cab5944a3e55d2d58bb3d075", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49466.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49466.json index b4105736e24..3789bed26f1 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49466.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49466.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49466", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:22.880", - "lastModified": "2025-02-26T07:01:22.880", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:09:48.893", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regulator: scmi: Se corrige la p\u00e9rdida de recuento de referencias en scmi_regulator_probe. of_find_node_by_name() devuelve un puntero de nodo con el recuento de referencias incrementado; cuando termine, debemos usar of_node_put() en \u00e9l. Agregue el error of_node_put() faltante para evitar la p\u00e9rdida de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/299a002161c7bfb72e99ba45e5b660aecc344ea0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a59c763ef9b68c711dc2fd2ef4a6648da5480ee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/68d6c8476fd4f448e70e0ab31ff972838ac41dae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ebbfa73d69909b7c737f599fd4ebd42318fc881", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49467.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49467.json index 4e52df765bc..8fed2d3ef1b 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49467.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49467.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49467", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:22.967", - "lastModified": "2025-02-26T07:01:22.967", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:09:17.333", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,145 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm: msm: se corrige una posible p\u00e9rdida de memoria en mdp5_crtc_cursor_set() drm_gem_object_lookup llamar\u00e1 a drm_gem_object_get internamente. Por lo tanto, cursor_bo debe colocarse cuando msm_gem_get_and_pin_iova falla." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "82280E53-C2F6-44F3-BF58-0A8C4FD63F08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/33546183c16c7b9650682dc610bedd732d9c6919", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/449374565f349d4233beec811d4286fdfe5de44b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/656aa3c51fc662064f17179b38ec3ce43af53bca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/947a844bb3ebff0f4736d244d792ce129f6700d7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d544880482a5558ec06393b1b3d5dc9275b7a32b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d63ffe3fb3f8327ca21cf91b6a14a2961bc629b4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8cd192752a1f613b14eee77783c6f0aebb49691", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49468.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49468.json index c81add54a67..7e846dcfa20 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49468.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49468.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49468", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:23.063", - "lastModified": "2025-02-26T07:01:23.063", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:09:09.383", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: thermal/core: Fix memory leak in __thermal_cooling_device_register() Obtuve una p\u00e9rdida de memoria de la siguiente manera al realizar la prueba de inyecci\u00f3n de fallas: objeto sin referencia 0xffff888010080000 (size 264312): comm \"182\", pid 102533, jiffies 4296434960 (age 10.100s) hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... ff ff ff ff ff ff ff ff 40 7f 1f b9 ff ff ff ff ........@....... backtrace: [<0000000038b2f4fc>] kmalloc_order_trace+0x1d/0x110 mm/slab_common.c:969 [<00000000ebcb8da5>] __kmalloc+0x373/0x420 include/linux/slab.h:510 [<0000000084137f13>] thermal_cooling_device_setup_sysfs+0x15d/0x2d0 include/linux/slab.h:586 [<00000000352b8755>] __thermal_cooling_device_register+0x332/0xa60 drivers/thermal/thermal_core.c:927 [<00000000fb9f331b>] devm_thermal_of_cooling_device_register+0x6b/0xf0 drivers/thermal/thermal_core.c:1041 [<000000009b8012d2>] max6650_probe.cold+0x557/0x6aa drivers/hwmon/max6650.c:211 [<00000000da0b7e04>] i2c_device_probe+0x472/0xac0 drivers/i2c/i2c-core-base.c:561 If device_register() fails, thermal_cooling_device_destroy_sysfs() need be called to free the memory allocated in thermal_cooling_device_setup_sysfs(). " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "78448A44-9104-4186-9509-BA75F47D6D60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/18530bedd221160823f63ccc20dd55c7a03edbcf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/21ccc58b671aea924f2481cf5c1cf0ebbfd3552d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3802171f0b5b8b831f4ade5c827547cb323a5bb2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98a160e898c0f4a979af9de3ab48b4b1d42d1dbb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9abdf0c0184230f0cb5c6685aabf33dda89aa9fb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49471.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49471.json index 6144bb2c8bc..ce5d17da98f 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49471.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49471.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49471", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:23.333", - "lastModified": "2025-02-26T07:01:23.333", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:09:01.893", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,88 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rtw89: cfo: comprobar mac_id para evitar fuera de los l\u00edmites De alguna manera, el hardware informa mac_id incorrecto y contamina la memoria. Compruebe el \u00edndice antes de acceder a la matriz. UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23 index 188 is out of range for type 's32 [64]' CPU: 1 PID: 51550 Comm: irq/35-rtw89_pc Tainted: G OE Call Trace: show_stack+0x52/0x58 dump_stack_lvl+0x4c/0x63 dump_stack+0x10/0x12 ubsan_epilogue+0x9/0x45 __ubsan_handle_out_of_bounds.cold+0x44/0x49 ? __alloc_skb+0x92/0x1d0 rtw89_phy_cfo_parse+0x44/0x7f [rtw89_core] rtw89_core_rx+0x261/0x871 [rtw89_core] ? __alloc_skb+0xee/0x1d0 rtw89_pci_napi_poll+0x3fa/0x4ea [rtw89_pci] __napi_poll+0x33/0x1a0 net_rx_action+0x126/0x260 ? __queue_work+0x217/0x4c0 __do_softirq+0xd9/0x315 ? disable_irq_nosync+0x10/0x10 do_softirq.part.0+0x6d/0x90 __local_bh_enable_ip+0x62/0x70 rtw89_pci_interrupt_threadfn+0x182/0x1a6 [rtw89_pci] irq_thread_fn+0x28/0x60 irq_thread+0xc8/0x190 ? irq_thread_fn+0x60/0x60 kthread+0x16b/0x190 ? irq_thread_check_affinity+0xe0/0xe0 ? set_kthread_struct+0x50/0x50 ret_from_fork+0x22/0x30 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-129" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "B87A352E-884A-4C74-8E72-53AFC0D486B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/03ed236480aeec8c2fd327a1ea6d711364c495e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97df85871a5b187609d30fca6d85b912d9e02f29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c32fafe68298bb599e825c298e1d0ba30186f0a5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49472.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49472.json index c35b98ae104..3a7677b9f48 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49472.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49472.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49472", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:23.423", - "lastModified": "2025-02-26T07:01:23.423", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:08:54.433", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,158 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: phy: micrel: Permitir sondeo sin .driver_data Actualmente, si el elemento .probe est\u00e1 presente en la estructura phy_driver y .driver_data no, se produce una desreferencia de puntero NULL. Permitir pasar .probe sin .driver_data insertando comprobaciones NULL para priv->type." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "42074657-A7B6-4740-88B7-67B440018C1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/143878e18001c5a61fcc7ae5c5240323753bb641", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1e5fbfc2a6f384e3195446c14bbd3bc298eb88c2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/660dfa033ccc9afb032015b6dc76e846bba42cfb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7dcb404662839a4ed1a9703658fee979eb894ca4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91e720b32cba25fa58eaa4c88fe957009cffe9f3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/abb5594ae2ba7b82cce85917cc6337ec5d774837", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd219273b4e004a3f853da72e111fc8f81357501", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f2ef6f7539c68c6bd6c32323d8845ee102b7c450", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49473.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49473.json index 038447f2157..1858e995437 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49473.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49473.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49473", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:23.517", - "lastModified": "2025-02-26T07:01:23.517", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:08:31.777", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: ti: j721e-evm: Se corrige la p\u00e9rdida de recuento de referencias en j721e_soc_probe_* of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado, deber\u00edamos usar of_node_put() en \u00e9l cuando ya no sea necesario. Agregue of_node_put() faltante para evitar la p\u00e9rdida de recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "D72A0A66-110A-4144-A452-8FE84D5A41C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2a3966b950b37a6f10c5f9caee15b4cdcf5a7413", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/510e879420b410d88c612aecc6ca15dc6fe77473", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/554df0f70bff1ace6d2df2fcaddbc9b7bd509de2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a34840c4eb3278a7c29c9c57a65ce7541c66f9f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d748ff8fbb3a5296bddd586445dc692b079cbe3d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49475.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49475.json index c33a62355c3..202a53c03b2 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49475.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49475.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49475", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:23.713", - "lastModified": "2025-02-26T07:01:23.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:08:23.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: spi: spi-fsl-qspi: verificar el valor de retorno despu\u00e9s de llamar a platform_get_resource_byname() Causar\u00e1 null-ptr-deref si platform_get_resource_byname() devuelve NULL, necesitamos verificar el valor de retorno." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.8", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "6EB90EB1-2051-4828-B7F9-DDA87FD914C2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/10f537219629769498ecb8515e096be213224c24", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/33dda87d04598ac5d9a849218a373443f7d3de66", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/560dcbe1c7a78f597f2167371ebdbe2bca3d0735", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9d9c84825c3ec359b165c762a424cfdefe87fdd7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a2b331ac11e1cac56f5b7d367e9f3c5796deaaed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49476.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49476.json index 85f2053deac..672bef38657 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49476.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49476.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49476", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:23.800", - "lastModified": "2025-02-26T07:01:23.800", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:08:07.923", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mt76: mt7921: se corrige el fallo del kernel en mt7921_pci_remove El registro de fallos muestra que es posible que se llame a mt7921_irq_handler mientras se maneja devm_free_irq, por lo que mt76_free_device debe posponerse hasta que se complete devm_free_irq para resolver el fallo, liberamos el dispositivo mt76 demasiado pronto. [ 9299.339655] ERROR: desreferencia de puntero NULL del n\u00facleo, direcci\u00f3n: 0000000000000008 [ 9299.339705] #PF: acceso de lectura del supervisor en modo n\u00facleo [ 9299.339735] #PF: error_code(0x0000) - not-present page [ 9299.339768] PGD 0 P4D 0 [ 9299.339786] Oops: 0000 [#1] SMP PTI [ 9299.339812] CPU: 1 PID: 1624 Comm: prepare-suspend Not tainted 5.15.14-1.fc32.qubes.x86_64 #1 [ 9299.339863] Hardware name: Xen HVM domU, BIOS 4.14.3 01/20/2022 [ 9299.339901] RIP: 0010:mt7921_irq_handler+0x1e/0x70 [mt7921e] [ 9299.340048] RSP: 0018:ffffa81b80c27cb0 EFLAGS: 00010082 [ 9299.340081] RAX: 0000000000000000 RBX: ffff98a4cb752020 RCX: ffffffffa96211c5 [ 9299.340123] RDX: 0000000000000000 RSI: 00000000000d4204 RDI: ffff98a4cb752020 [ 9299.340165] RBP: ffff98a4c28a62a4 R08: ffff98a4c37a96c0 R09: 0000000080150011 [ 9299.340207] R10: 0000000040000000 R11: 0000000000000000 R12: ffff98a4c4eaa080 [ 9299.340249] R13: ffff98a4c28a6360 R14: ffff98a4cb752020 R15: ffff98a4c28a6228 [ 9299.340297] FS: 00007260840d3740(0000) GS:ffff98a4ef700000(0000) knlGS:0000000000000000 [ 9299.340345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 9299.340383] CR2: 0000000000000008 CR3: 0000000004c56001 CR4: 0000000000770ee0 [ 9299.340432] PKRU: 55555554 [ 9299.340449] Call Trace: [ 9299.340467] [ 9299.340485] __free_irq+0x221/0x350 [ 9299.340527] free_irq+0x30/0x70 [ 9299.340553] devm_free_irq+0x55/0x80 [ 9299.340579] mt7921_pci_remove+0x2f/0x40 [mt7921e] [ 9299.340616] pci_device_remove+0x3b/0xa0 [ 9299.340651] __device_release_driver+0x17a/0x240 [ 9299.340686] device_driver_detach+0x3c/0xa0 [ 9299.340714] unbind_store+0x113/0x130 [ 9299.340740] kernfs_fop_write_iter+0x124/0x1b0 [ 9299.340775] new_sync_write+0x15c/0x1f0 [ 9299.340806] vfs_write+0x1d2/0x270 [ 9299.340831] ksys_write+0x67/0xe0 [ 9299.340857] do_syscall_64+0x3b/0x90 [ 9299.340887] entry_SYSCALL_64_after_hwframe+0x44/0xae " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.12", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "D037F2A7-2027-4A28-88EA-7BCC721762E9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/09693f5b636fb3f6dd56fd943226fc1bbc600b51", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/677e669973bf5460705bc65033445ea9f6615999", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ad483ed9dd5193a54293269c852a29051813b7bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49477.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49477.json index 518a498b386..fa2c842e043 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49477.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49477.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49477", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:23.920", - "lastModified": "2025-02-26T07:01:23.920", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:08:15.377", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: samsung: Se corrige la p\u00e9rdida de refcount en aries_audio_probe of_parse_phandle() devuelve un puntero de nodo con refcount incrementado, deber\u00edamos usar of_node_put() en \u00e9l cuando haya terminado. Si extcon_find_edev_by_node() falla, no llama a of_node_put() Llamar a of_node_put() despu\u00e9s de extcon_find_edev_by_node() para corregir esto." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "D72A0A66-110A-4144-A452-8FE84D5A41C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/46d1b310a2d571811c4e08041ce287babb60b86a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/70130bde3457d28c02c76b6cacc5d40a72dd6e17", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/85d899f396622d3034643bf89615a78f9be7c91a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bf4a9b2467b775717d0e9034ad916888e19713a3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cacea459f95be22b3750f3b25b7a1c5897a68206", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49478.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49478.json index 53f56d236ca..d90f1d501b2 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49478.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49478.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49478", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.050", - "lastModified": "2025-02-26T07:01:24.050", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:07:58.500", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: pvrusb2: arreglo array-index-out-of-bounds en pvr2_i2c_core_init Syzbot inform\u00f3 que se usa -1 como \u00edndice de matriz. El problema estaba en la falta de verificaci\u00f3n de validaci\u00f3n. hdw->unit_number se inicializa con -1 y luego, si falla el recorrido de tabla init, este valor permanece sin cambios. Dado que el c\u00f3digo usa ciegamente este miembro para la indexaci\u00f3n de matrices, agregar una verificaci\u00f3n de cordura es la soluci\u00f3n m\u00e1s f\u00e1cil para eso. La inicializaci\u00f3n de hdw->workpoll se movi\u00f3 hacia arriba para evitar la advertencia en __flush_work." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-129" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.18", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "F4C7C7D7-D7D3-4358-818B-49B2982DB29A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1310fc3538dcc375a2f46ef0a438512c2ca32827", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/24e807541e4a9263ed928e6ae3498de3ad43bd1e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e004fe914b243db41fa96f9e583385f360ea58e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3309c2c574e13b21b44729f5bdbf21f60189b79a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4351bfe36aba9fa7dc9d68d498d25d41a0f45e67", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/471bec68457aaf981add77b4f590d65dd7da1059", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3304766d9384886e6d3092c776273526947a2e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3660e06675bccec4bf149c7229ea1d491ba10d7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f99a8b1ec0eddc2931aeaa4f490277a15b39f511", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49480.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49480.json index d283ac6c957..d257966ce13 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49480.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49480.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49480", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.243", - "lastModified": "2025-02-26T07:01:24.243", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:29.907", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: imx-hdmi: se corrige la p\u00e9rdida de recuento de referencias en imx_hdmi_probe. La referencia que toma la instancia de_find_device_by_node() se debe liberar. Deber\u00edamos usar put_device() para liberarla. Cuando falla devm_kzalloc(), no tiene un put_device(), lo que provocar\u00e1 una p\u00e9rdida de recuento de referencias. Agregue el put_device() faltante para solucionar esto." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/81b7edaabd44ba133006ad72056914eb36828d60", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8205a0114db10ec41bd2b748cdd7528632082eca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf760e494ee5fa6bc2dc222f0098c741ad460801", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ed46731d8e86c8d65f5fc717671e1f1f6c3146d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49481.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49481.json index f35f5eb77b7..63a9e63b2fe 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49481.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49481.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49481", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.340", - "lastModified": "2025-02-26T07:01:24.340", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:39.170", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regulator: pfuze100: Se corrige la p\u00e9rdida de recuento de referencias en pfuze_parse_regulators_dt. of_node_get() devuelve un nodo con un recuento de referencias incrementado. Se llama a of_node_put() para descartar la referencia cuando ya no se necesita." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.12", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "E11DA367-2A3E-4441-9F08-01AD64D12276" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0be5d9da5743b9825a95baec85a67500b2c1d362", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/49d785baeb91568332197be356d138e5e59c7ddb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/56ab0c01027492cd161c64148e1dc892c56887ad", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/671be14fc31374b1a10a3abd93db6a8480838fc9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6ca675f4abbc74bc991d154a1ecc8b384dc2aae4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/984cfef0675ed7398814e14af2c5323911723e1c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9f564e29a51210a49df3d925117777c157a17d6d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/afaa7b933ef00a2d3262f4d1252087613fb5c06d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b74c0dd9179d21b7260260e075d597b23970100c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49482.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49482.json index ab3d4ccdb57..c537c717c1e 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49482.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49482.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49482", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.433", - "lastModified": "2025-02-26T07:01:24.433", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:17.220", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: mxs-saif: se corrige la p\u00e9rdida de recuento de referencias en mxs_saif_probe of_parse_phandle() devuelve un puntero de nodo con el recuento de referencias incrementado, deber\u00edamos usar of_node_put() en \u00e9l cuando haya terminado." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.5", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "62D331F3-ED67-4548-B928-8B574F9A66DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/18b907ff0ae4bf20120aae1538f7156b9d08e3a7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/24491124406666bf0dcb9ee10c5575c6ce6a1730", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2a0da7641e1f17a744ac7b3f76471388c97b63dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2be84f73785fa9ed6443e3c5b158730266f1c2ee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/30d110ca703ce60162ec337aa564a3e4da30715f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e2a1bcc51bdebed48176f6e88c150f175983f9c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c933829cbf3338b684869e6c4c8931abf5d68fbd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d42601e93fce7802bb8d70dd59b60cfeefa20469", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d855505851ee8ba666eb204149b49f906130dc17", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49483.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49483.json index d3c7185ec16..4567d336681 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49483.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49483.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49483", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.527", - "lastModified": "2025-02-26T07:01:24.527", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:23.390", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/disp/dpu1: evitar borrar interrupciones de hardware si hw_intr es nulo durante la desiniciaci\u00f3n de drm. Si la inicializaci\u00f3n del modo edp falla debido a que el panel no est\u00e1 listo y la sonda se pospone durante el enlace de drm, evitar borrar irq y desreferenciar hw_intr cuando hw_intr es nulo. ERROR: No se puede gestionar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 0000000000000000 Seguimiento de llamadas: dpu_core_irq_uninstall+0x50/0xb0 dpu_irq_uninstall+0x18/0x24 msm_drm_uninit+0xd8/0x16c msm_drm_bind+0x580/0x5fc try_to_bring_up_master+0x168/0x1c0 __component_add+0xb4/0x178 component_add+0x1c/0x28 dp_display_probe+0x38c/0x400 platform_probe+0xb0/0xd0 really_probe+0xcc/0x2c8 __driver_probe_device+0xbc/0xe8 driver_probe_device+0x48/0xf0 __device_attach_driver+0xa0/0xc8 bus_for_each_drv+0x8c/0xd8 __device_attach+0xc4/0x150 device_initial_probe+0x1c/0x28 Cambios en la versi\u00f3n 2: - Se actualiza el mensaje de confirmaci\u00f3n y la etiqueta de correcciones de errores. Patchwork: https://patchwork.freedesktop.org/patch/484430/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/01013ba9bbddc62f7d011163cebfd7ed06bb698b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7ca30c3a8b2e8bda65f2b922d382ac056be8aa4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a800701429313149afde18d98821554fbfcb3164", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49484.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49484.json index f911c6b3692..c9704100060 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49484.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49484.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49484", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.620", - "lastModified": "2025-02-26T07:01:24.620", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:09.257", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mt76: mt7915: se corrige una posible desreferencia de puntero NULL en mt7915_mac_fill_rx_vector. Se corrige una posible desreferencia de puntero NULL en la rutina mt7915_mac_fill_rx_vector si el chip no admite dbdc y el hardware informa que band_idx est\u00e1 establecido en 1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.12", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "9C4C8801-C8E1-453C-8A1F-730DACD96BE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/268e8ef187eb8780d021b0e4f5ffa92dee5c4983", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62fdc974894eec80d678523458cf99bbdb887e22", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49485.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49485.json index 548a34c2311..c0db9fe01fc 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49485.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49485.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49485", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.710", - "lastModified": "2025-02-26T07:01:24.710", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:53:00.020", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/v3d: Se corrige la desreferenciaci\u00f3n del puntero nulo del puntero perfmon. En el improbable caso de que el puntero perfmon sea nulo, la ruta de retorno WARN_ON se produce despu\u00e9s de que el puntero ya haya sido desreferenciado. Solucione esto desreferenciando perfmon solo despu\u00e9s de que se haya comprobado que es nulo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "FA8369C7-8B08-4709-9CE6-2131C7668313" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1df8f8901babcc8c8eea2c067179e455b5c828fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4be045434923e549a50846a066a04b7b6c1d6d33", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce7a1ecf3f9f1fccaf67295307614511d8e11b13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49486.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49486.json index fe93ab13778..9ca67ad77a3 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49486.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49486.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49486", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.803", - "lastModified": "2025-02-26T07:01:24.803", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:52:52.160", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: fsl: Se corrige la p\u00e9rdida de recuento de referencias en imx_sgtl5000_probe. of_find_i2c_device_by_node() toma una referencia. En las rutas de error, debemos llamar a put_device() para eliminar la referencia y evitar la p\u00e9rdida de recuento." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.5", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "34C77A08-8734-47BC-8323-18672EA1F47C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/41cd312dfe980af869c3503b4d38e62ed20dd3b7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4bfbbfdb3d761323127a67d7d765abe2f77d7b21", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f75e9f629ef54a0845b43889d8ab9dd6e280dd5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/922bccdb1796a9e7b989f2bc6d9ada7b499a4329", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/96fc3da6184af5687e153d420cd7dcdeefdd2f9a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e84aaf23ca82753d765bf84d05295d9d9c5fed29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49487.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49487.json index 8cbc6c21dec..106af2d7a5c 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49487.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49487.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49487", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:24.897", - "lastModified": "2025-02-26T07:01:24.897", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:52:44.953", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: rawnand: intel: corrige posible null-ptr-deref en ebu_nand_probe() Provocar\u00e1 null-ptr-deref al usar 'res', si platform_get_resource() devuelve NULL, as\u00ed que pase a usar 'res' despu\u00e9s de devm_ioremap_resource() que lo comprobar\u00e1 para evitar null-ptr-deref." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/daa5166450b447415aeeaac0199e445bae7bd0f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ddf66aefd685fd46500b9917333e1b1e118276dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5b1e419cdb6dd8709eb05ed34039a3ded8e6003", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8e262eb7575a4a2412f30f7a1b293875aceba80", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49491.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49491.json index e98d1f971b1..9159bc919d1 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49491.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49491.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49491", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:25.280", - "lastModified": "2025-02-26T07:01:25.280", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:52:36.297", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/rockchip: vop: corrige posible null-ptr-deref en vop_bind() Provocar\u00e1 null-ptr-deref en resource_size(), si platform_get_resource() devuelve NULL, mueve la llamada a resource_size() despu\u00e9s de devm_ioremap_resource() que comprobar\u00e1 'res' para evitar null-ptr-deref." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.19", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "02D3C56C-D3FD-43B0-B6C3-0CA4A843E90D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3451852312303d54a003c73bd0ae39cebb960bd5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/452922955df215a417c80d09dab72bbc667a1861", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6ff986e057bf28e2f7690dad410768b2270f9453", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/769c53bb6116d0eaec0f1fe4ec4b27a74465cad1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a9b4599665e437de8a1152799c34841b799a2e1c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b54926bd558d97c888c3d2d87886f3c159d3254a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ecfa52654d0c9c333c1fe1611f47105f6bce9591", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8c242908ad15bbd604d3bcb54961b7d454c43f8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fcd6a886443730c39170b8383411e52118aec0a3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49492.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49492.json index c53a703e9f9..464d03061ce 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49492.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49492.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49492", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:25.410", - "lastModified": "2025-02-26T07:01:25.410", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:52:24.447", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,172 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvme-pci: corrige una desreferencia de puntero NULL en nvme_alloc_admin_tags En nvme_alloc_admin_tags, admin_q se puede configurar en un error (normalmente -ENOMEM) si la llamada blk_mq_init_queue no puede configurar la cola, que se comprueba inmediatamente despu\u00e9s de la llamada. Sin embargo, cuando devolvemos el mensaje de error a la pila, a nvme_reset_work el error nos lleva a nvme_remove_dead_ctrl() nvme_dev_disable() nvme_suspend_queue(&dev->queues[0]). Aqu\u00ed, solo comprobamos que admin_q no sea NULL, en lugar de no ser un error o NULL, y comenzamos a inactivar una cola que nunca existi\u00f3, lo que lleva a una desreferencia de puntero NULL incorrecta." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "0D4D4067-974D-4560-8320-22FDA399E3F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/54a4c1e47d1b2585e74920399455bd9abbfb2bd7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a28556082d1fbcbc599baf1c24252dfc73efefc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8321b17789f614414206af07e17ce4751c95dc76", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8da2b7bdb47e94bbc4062a3978c708926bcb022c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/906c81dba8ee8057523859b5e1a2479e9fd34860", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e649471b396fa0139d53919354ce1eace9b9a24", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/af98940dd33c9f9e1beb4f71c0a39260100e2a65", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/da42761181627e9bdc37d18368b827948a583929", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f76729662650cd7bc8f8194e057af381370349a7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49494.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49494.json index 9f4b7ff3952..4a7852d22fa 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49494.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49494.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49494", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:25.613", - "lastModified": "2025-02-26T07:01:25.613", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:52:15.630", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: rawnand: cadence: se corrige un posible null-ptr-deref en cadence_nand_dt_probe(). Provocar\u00e1 un null-ptr-deref al usar 'res', si platform_get_resource() devuelve NULL, as\u00ed que pase a usar 'res' despu\u00e9s de devm_ioremap_resource() que lo comprobar\u00e1 para evitar un null-ptr-deref. Y use devm_platform_get_and_ioremap_resource() para simplificar el c\u00f3digo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/069af5e27c1b0f7677ef76d8d3102e503ca4f80b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0cfee868b89ffa945f3d535ee5c985cb40c5a0f8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13b60d3dc84b47307669edb66b633b18466014b4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/81f1ddffdc22ca5789e33b9d4712914e302090c1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a28ed09dafee20da51eb26452950839633afd824", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49495.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49495.json index 102a707627a..a0e4b2abc32 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49495.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49495.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49495", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:25.707", - "lastModified": "2025-02-26T07:01:25.707", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:52:07.033", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/hdmi: comprobar el valor de retorno despu\u00e9s de llamar a platform_get_resource_byname(). Esto provocar\u00e1 un error de referencia nulo si platform_get_resource_byname() devuelve NULL. Necesitamos comprobar el valor de retorno. Patchwork: https://patchwork.freedesktop.org/patch/482992/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.3", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "F1C012DB-8F29-4B2B-BD28-40BDE97C3304" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0978fcce91b90b561b8c82e7c492ba9fc8440eef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2b3ed7547b1a052209da6c4ab886ffe0eed88c42", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4cd66a8016b872a153bf892fe4258cbc0dacf5b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6369dda4a2209142ab819f01d3d2076d81e3ebdd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9cb1ee33efccb8b107ee04b7b3441820de3fd2da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9f5495a5c51c1d11c6ffc13aa2befffec0c2651a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a36e506711548df923ceb7ec9f6001375be799a5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c1bfacf0daf25a5fc7d667399d6ff2dffda84cd8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9cb951d11a4ace4de5c50b1178ad211de17079e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49496.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49496.json index ff367cb6181..ef44333bcc7 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49496.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49496.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49496", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:25.800", - "lastModified": "2025-02-26T07:01:25.800", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:51:55.113", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,74 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: mediatek: vcodec: evitar el bloqueo del kernel cuando se ejecuta rmmod mtk-vcodec-dec.ko Si el controlador admite el modo subdev, el par\u00e1metro \"dev->pm.dev\" ser\u00e1 NULL en mtk_vcodec_dec_remove. El kernel se bloquear\u00e1 cuando se intente ejecutar rmmod mtk-vcodec-dec.ko. [ 4380.702726] pc : do_raw_spin_trylock+0x4/0x80 [ 4380.707075] lr : _raw_spin_lock_irq+0x90/0x14c [ 4380.711509] sp : ffff80000819bc10 [ 4380.714811] x29: ffff80000819bc10 x28: ffff3600c03e4000 x27: 0000000000000000 [ 4380.721934] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 [ 4380.729057] x23: ffff3600c0f34930 x22: ffffd5e923549000 x21: 0000000000000220 [ 4380.736179] x20: 0000000000000208 x19: ffffd5e9213e8ebc x18: 0000000000000020 [ 4380.743298] x17: 0000002000000000 x16: ffffd5e9213e8e90 x15: 696c346f65646976 [ 4380.750420] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000040 [ 4380.757542] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 4380.764664] x8 : 0000000000000000 x7 : ffff3600c7273ae8 x6 : ffffd5e9213e8ebc [ 4380.771786] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 4380.778908] x2 : 0000000000000000 x1 : ffff3600c03e4000 x0 : 0000000000000208 [ 4380.786031] Call trace: [ 4380.788465] do_raw_spin_trylock+0x4/0x80 [ 4380.792462] __pm_runtime_disable+0x2c/0x1b0 [ 4380.796723] mtk_vcodec_dec_remove+0x5c/0xa0 [mtk_vcodec_dec] [ 4380.802466] platform_remove+0x2c/0x60 [ 4380.806204] __device_release_driver+0x194/0x250 [ 4380.810810] driver_detach+0xc8/0x15c [ 4380.814462] bus_remove_driver+0x5c/0xb0 [ 4380.818375] driver_unregister+0x34/0x64 [ 4380.822288] platform_driver_unregister+0x18/0x24 [ 4380.826979] mtk_vcodec_dec_driver_exit+0x1c/0x888 [mtk_vcodec_dec] [ 4380.833240] __arm64_sys_delete_module+0x190/0x224 [ 4380.838020] invoke_syscall+0x48/0x114 [ 4380.841760] el0_svc_common.constprop.0+0x60/0x11c [ 4380.846540] do_el0_svc+0x28/0x90 [ 4380.849844] el0_svc+0x4c/0x100 [ 4380.852975] el0t_64_sync_handler+0xec/0xf0 [ 4380.857148] el0t_64_sync+0x190/0x194 [ 4380.860801] Code: 94431515 17ffffca d503201f d503245f (b9400004) " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "3108C4DF-1578-4A9A-ADC7-1128DE921D69" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1fa37b00dc55a061a3eb82e378849862b4aeca9d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c10c0086db688c95bb4e0e378e523818dff1551d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49497.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49497.json index 08b72305ddb..3d8311335bc 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49497.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49497.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49497", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:25.893", - "lastModified": "2025-02-26T07:01:25.893", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:51:46.490", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,116 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: eliminar dos BUG() de skb_checksum_help() Tengo un informe de syzbot que logr\u00f3 obtener un bloqueo en skb_checksum_help() Si syzbot puede activar estos BUG(), tiene sentido reemplazarlos con WARN_ON_ONCE() m\u00e1s amigables ya que skb_checksum_help() puede devolver un c\u00f3digo de error. Tenga en cuenta que syzbot seguir\u00e1 fallando all\u00ed, hasta que se solucione el error real." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "814C88C6-C31D-462A-BBBE-BC83E102E84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/312c43e98ed190bd8fd7a71a0addf9539d5b8ab1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6320ae1b5876c30bf98203b6a5abe8b5c45e6a04", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1320c9a4d30ff54b824a8ad6036e0b5fb4c5e73", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5281245f3502e960cb6b89348767b935379cee3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d7ea0d9df2a6265b2b180d17ebc64b38105968fc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49498.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49498.json index 1696ca23f24..494e172a882 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49498.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49498.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49498", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:25.987", - "lastModified": "2025-02-26T07:01:25.987", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:54:23.170", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,124 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: pcm: Verificar si el puntero de la subsecuencia de puntero es nulo antes de desreferenciarlo La subsecuencia de puntero se desreferencia en la asignaci\u00f3n de la tarjeta de puntero antes de que la subsecuencia sea verificada como nula con la macro PCM_RUNTIME_CHECK. Aunque PCM_RUNTIME_CHECK llama a BUG_ON, sigue siendo \u00fatil realizar la verificaci\u00f3n del puntero antes de que se asigne la tarjeta." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "A15DF1FA-9BBB-4490-9023-56F79F29AC6E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/011b559be832194f992f73d6c0d5485f5925a10b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1f2e28857be1e5c7db39bbc221332215fc5467e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7784d22f81a29df2ec57ca90d54f93a35cbcd1a2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b2421a196cb0911ea95aec1050a0b830464c8fa6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b41ef7ad9238c22aa2e142f5ce4ce1a1a0d48123", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f2c68c52898f623fe84518da4606538d193b0cca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49499.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49499.json index ea0ecf707e0..f0533f8fef8 100644 --- a/CVE-2022/CVE-2022-494xx/CVE-2022-49499.json +++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49499.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49499", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:26.077", - "lastModified": "2025-02-26T07:01:26.077", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:51:32.397", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm: corrige desreferencias de puntero nulo sin iommu. Comprueba si 'aspace' est\u00e1 configurado antes de usarlo, ya que permanecer\u00e1 nulo sin IOMMU, como en msm8974." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/36a1d1bda77e1851bddfa9cf4e8ada94476dbaff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f09937e80f9bc792965476c9a528f26c8fdc9179", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49502.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49502.json index a9da9fe4180..0281fd998b8 100644 --- a/CVE-2022/CVE-2022-495xx/CVE-2022-49502.json +++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49502.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49502", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:26.353", - "lastModified": "2025-02-26T07:01:26.353", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:51:25.637", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,116 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: rga: corrige posible p\u00e9rdida de memoria en rga_probe rga->m2m_dev debe liberarse cuando rga_probe falla." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "814C88C6-C31D-462A-BBBE-BC83E102E84C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1cdc768468c25d6b10ab83ec1efd4a8554532d69", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8ddc89437ccefa18279918c19a61fd81527f40b9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a71eb6025305192e646040cd76ccacb5bd48a1b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b7bbca4d08471bc8404a946bab1aa017dd05199b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eeb4819e94aa69767b9e5591e70c63e8b7c5786a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49507.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49507.json index bcbeea86a01..89ea993d819 100644 --- a/CVE-2022/CVE-2022-495xx/CVE-2022-49507.json +++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49507.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49507", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:26.830", - "lastModified": "2025-02-26T07:01:26.830", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:51:16.030", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regulador: da9121: Fix uninit-value in da9121_assign_chip_model() KASAN report slab-out-of-bounds in __regmap_init as follows: BUG: KASAN: slab-out-of-bounds in __regmap_init drivers/base/regmap/regmap.c:841 Read of size 1 at addr ffff88803678cdf1 by task xrun/9137 CPU: 0 PID: 9137 Comm: xrun Tainted: G W 5.18.0-rc2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace: dump_stack_lvl+0xe8/0x15a lib/dump_stack.c:88 print_report.cold+0xcd/0x69b mm/kasan/report.c:313 kasan_report+0x8e/0xc0 mm/kasan/report.c:491 __regmap_init+0x4540/0x4ba0 drivers/base/regmap/regmap.c:841 __devm_regmap_init+0x7a/0x100 drivers/base/regmap/regmap.c:1266 __devm_regmap_init_i2c+0x65/0x80 drivers/base/regmap/regmap-i2c.c:394 da9121_i2c_probe+0x386/0x6d1 drivers/regulator/da9121-regulator.c:1039 i2c_device_probe+0x959/0xac0 drivers/i2c/i2c-core-base.c:563 This happend when da9121 device is probe by da9121_i2c_id, but with invalid dts. Thus, chip->subvariant_id is set to -EINVAL, and later da9121_assign_chip_model() will access 'regmap' without init it. Fix it by return -EINVAL from da9121_assign_chip_model() if 'chip->subvariant_id' is invalid. " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-908" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/60f21eda69f1b5727a97d2077da766eb27fcc21f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7da64c7c82c9b29b628a62c88a8c2fb06990563d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bab76514aca36bc513224525d5598da676938218", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/be96baa0c79588084e0d7a4fa21c574cec9a57f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49508.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49508.json index 5feb95eeaaf..5c260485777 100644 --- a/CVE-2022/CVE-2022-495xx/CVE-2022-49508.json +++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49508.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49508", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:26.923", - "lastModified": "2025-02-26T07:01:26.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:50:15.920", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,145 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: elan: Se corrige una posible doble liberaci\u00f3n en elan_input_configured 'input' es un recurso administrado asignado con devm_input_allocate_device(), por lo que no es necesario llamar a input_free_device() expl\u00edcitamente o habr\u00e1 una doble liberaci\u00f3n. Seg\u00fan la documentaci\u00f3n de devm_input_allocate_device(): * Los dispositivos de entrada administrados no necesitan ser desregistrados expl\u00edcitamente o * liberados ya que se har\u00e1 autom\u00e1ticamente cuando el dispositivo propietario se desvincule de * su controlador (o la vinculaci\u00f3n falle)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.17", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "1D618A3C-AEC5-4520-BBDB-002AC8CA3FED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1af20714fedad238362571620be0bd690ded05b6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5291451851feeb66fd4bf0826710f482f3b1ab38", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6d0726725c7c560495f5ff364862a2cefea542e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8bb1716507ebf12d50bbf181764481de3b6bc7fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c92ec22a991778a096342cf1a917ae36c5c86a90", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1d4f19a796551edc6679a681ea1756b8c578c08", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49510.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49510.json index e084b9d8756..a33a33e2b12 100644 --- a/CVE-2022/CVE-2022-495xx/CVE-2022-49510.json +++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49510.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49510", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:27.107", - "lastModified": "2025-02-26T07:01:27.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:49:16.783", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/omap: se corrige el error de coccicheck NULL pero desreferenciado Se corrige la siguiente advertencia de coccicheck: ./drivers/gpu/drm/omapdrm/omap_overlay.c:89:22-25: ERROR: r_ovl es NULL pero desreferenciado. Aqu\u00ed deber\u00eda ser ovl->idx en lugar de r_ovl->idx." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "C48ED8B1-C02B-4764-9298-070E29EF1F88" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/08d9a75eab594ca508a440db7c73064498d26687", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8f2a3970c969d0d8d7289a4c65edcedafc16fd92", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d2507be660310bb9bcca918f81f49b8bba07e462", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49514.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49514.json index fa7d97c21da..aebbe1b4e7a 100644 --- a/CVE-2022/CVE-2022-495xx/CVE-2022-49514.json +++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49514.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49514", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:27.470", - "lastModified": "2025-02-26T07:01:27.470", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:48:15.700", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: mediatek: Se corrige la gesti\u00f3n de errores en la llamada mt8173_max98090_dev_probe of_node_put(platform_node) para evitar la p\u00e9rdida de recuento de referencias en la ruta de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.2", + "versionEndExcluding": "4.9.318", + "matchCriteriaId": "63B36856-FC1B-4124-B9BC-AF4563D72449" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a1901f34f775b83ea4b8dbb5ed992147b9b8531", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1e932aba3c7628c9f880ee9c2cfcc2ae3ba0c01e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/23f340ed906c758cec6527376768e3bc1474ac30", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/48889eb3cce91d7f58e02bc07277b7f724b7a54a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f4e0454e226de3bf4efd7e7924d1edc571c52d5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98d5afe868df998b0244f4c229ab758b4083684a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cc43b9fdca519c5b13be6a717bacbebccd628cf6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ebd5cb4f1f3f10b839e7575219e0f17b60c23113", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fb66e0512e5ccc093070e21cf88cce8d98c181b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49516.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49516.json index 72d5040e8a2..0d89a57fd8e 100644 --- a/CVE-2022/CVE-2022-495xx/CVE-2022-49516.json +++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49516.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49516", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:27.653", - "lastModified": "2025-02-26T07:01:27.653", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:48:02.917", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,74 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ice: siempre comprobar los valores del puntero VSI de VF La funci\u00f3n ice_get_vf_vsi puede devolver NULL en algunos casos, como si se trataran mensajes durante un reinicio en el que se elimina y se vuelve a crear el VSI. Varios lugares del controlador no se molestan en comprobar si este puntero VSI es v\u00e1lido. Las herramientas de an\u00e1lisis est\u00e1tico pueden informar problemas porque detectan rutas en las que se podr\u00eda desreferenciar un puntero potencialmente NULL. Solucione esto comprobando el valor de retorno de ice_get_vf_vsi en todas partes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "3108C4DF-1578-4A9A-ADC7-1128DE921D69" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/baeb705fd6a7245cc1fa69ed991a9cffdf44a174", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e7be3877589d539c52e5d1d23a625f889b541b9d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49517.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49517.json index ed420016364..92e97beec82 100644 --- a/CVE-2022/CVE-2022-495xx/CVE-2022-49517.json +++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49517.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49517", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-26T07:01:27.740", - "lastModified": "2025-02-26T07:01:27.740", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:54:35.437", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: mediatek: Se corrige la falta de of_node_put en mt2701_wm8960_machine_probe. Este puntero de nodo es devuelto por of_parse_phandle() con refcount incrementado en esta funci\u00f3n. Se llama a of_node_put() para evitar la fuga de refcount." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.12", + "versionEndExcluding": "4.14.283", + "matchCriteriaId": "C1826012-E991-4F57-B5A8-B3B6949796C0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.247", + "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.198", + "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.121", + "matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.46", + "matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.17.14", + "matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.3", + "matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/05654431a18fe24e5e46a375d98904134628a102", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/318afb1442eeef089fe7f8a8297d97c0302ff6f6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/61a85a20e8df5e0a92cfe169c92425c7bae0753b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9345122f5fb9f97a206f440f38bb656e53f46912", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/94587aa17abf8b26f543d2b29c44abc21bc36836", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bc2afecaabd2a2c9f17e43b4793a30e3461bfb29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c71494f5f2b444adfd992a7359a0d2a791642b39", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f279c49f17ce10866087ea6c0c57382158974b63", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49737.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49737.json index 6e7d6904f9e..e51fd111075 100644 --- a/CVE-2022/CVE-2022-497xx/CVE-2022-49737.json +++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49737.json @@ -2,13 +2,17 @@ "id": "CVE-2022-49737", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-16T01:15:35.543", - "lastModified": "2025-03-16T01:15:35.543", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:17.540", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock." + }, + { + "lang": "es", + "value": "En el servidor X de X.Org (versi\u00f3n 20.11 a 21.1.16), cuando una aplicaci\u00f3n cliente usa easystroke para los gestos del rat\u00f3n, el hilo principal modifica diversas estructuras de datos utilizadas por el hilo de entrada sin adquirir un bloqueo (es decir, una condici\u00f3n de ejecuci\u00f3n). En particular, AttachDevice en dix/devices.c no adquiere un bloqueo de entrada." } ], "metrics": { @@ -63,6 +67,10 @@ { "url": "https://gitlab.freedesktop.org/xorg/xserver/-/issues/1260", "source": "cve@mitre.org" + }, + { + "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1081338", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-02xx/CVE-2023-0241.json b/CVE-2023/CVE-2023-02xx/CVE-2023-0241.json index 2f89b1d3946..1bddfe99f28 100644 --- a/CVE-2023/CVE-2023-02xx/CVE-2023-0241.json +++ b/CVE-2023/CVE-2023-02xx/CVE-2023-0241.json @@ -2,7 +2,7 @@ "id": "CVE-2023-0241", "sourceIdentifier": "secalert@redhat.com", "published": "2023-03-27T21:15:10.147", - "lastModified": "2024-11-21T07:36:48.980", + "lastModified": "2025-03-17T16:46:07.940", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -66,9 +66,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:postgresql:pgadmin_4:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.19", - "matchCriteriaId": "4EC61F67-FCC9-4152-841C-CC9E21D484E3" + "matchCriteriaId": "3096375A-EDFB-4E7A-ABBF-0E8B8ED07C24" } ] } diff --git a/CVE-2023/CVE-2023-222xx/CVE-2023-22298.json b/CVE-2023/CVE-2023-222xx/CVE-2023-22298.json index b5445d72839..3220deca26a 100644 --- a/CVE-2023/CVE-2023-222xx/CVE-2023-22298.json +++ b/CVE-2023/CVE-2023-222xx/CVE-2023-22298.json @@ -2,7 +2,7 @@ "id": "CVE-2023-22298", "sourceIdentifier": "vultures@jpcert.or.jp", "published": "2023-01-17T10:15:11.657", - "lastModified": "2024-11-21T07:44:28.837", + "lastModified": "2025-03-17T16:43:52.873", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -60,10 +60,10 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:pgadmin:pgadmin:*:*:*:*:*:postgresql:*:*", + "criteria": "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*", "versionStartIncluding": "4.0", "versionEndExcluding": "6.14", - "matchCriteriaId": "FF5A5374-1FBF-4FAA-B908-5073F6764CA8" + "matchCriteriaId": "18DDF945-9119-4283-AEA0-D3220A796C91" } ] } diff --git a/CVE-2023/CVE-2023-46xx/CVE-2023-4699.json b/CVE-2023/CVE-2023-46xx/CVE-2023-4699.json index dcec2cd6c2f..0b28c7907f4 100644 --- a/CVE-2023/CVE-2023-46xx/CVE-2023-4699.json +++ b/CVE-2023/CVE-2023-46xx/CVE-2023-4699.json @@ -2,7 +2,7 @@ "id": "CVE-2023-4699", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "published": "2023-11-06T06:15:41.563", - "lastModified": "2025-02-26T22:15:11.913", + "lastModified": "2025-03-17T16:15:18.850", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -56,26 +56,6 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.2 - }, - { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "type": "Secondary", - "cvssData": { - "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", - "baseScore": 9.1, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "privilegesRequired": "NONE", - "userInteraction": "NONE", - "scope": "UNCHANGED", - "confidentialityImpact": "NONE", - "integrityImpact": "HIGH", - "availabilityImpact": "HIGH" - }, - "exploitabilityScore": 3.9, - "impactScore": 5.2 } ] }, @@ -99,20 +79,6 @@ "value": "CWE-345" } ] - }, - { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "type": "Primary", - "description": [ - { - "lang": "en", - "value": "CWE-306" - }, - { - "lang": "en", - "value": "CWE-345" - } - ] } ], "configurations": [ diff --git a/CVE-2023/CVE-2023-50xx/CVE-2023-5002.json b/CVE-2023/CVE-2023-50xx/CVE-2023-5002.json index be13dc8f5f3..fb6fbf682e1 100644 --- a/CVE-2023/CVE-2023-50xx/CVE-2023-5002.json +++ b/CVE-2023/CVE-2023-50xx/CVE-2023-5002.json @@ -2,7 +2,7 @@ "id": "CVE-2023-5002", "sourceIdentifier": "patrick@puiterwijk.org", "published": "2023-09-22T14:15:47.213", - "lastModified": "2024-11-21T08:40:51.867", + "lastModified": "2025-03-17T16:43:52.873", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -90,9 +90,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:pgadmin:pgadmin:*:*:*:*:*:postgresql:*:*", + "criteria": "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*", "versionEndExcluding": "7.7", - "matchCriteriaId": "15620E97-9BD2-4309-84E7-53EBF74D0CDE" + "matchCriteriaId": "0D507558-5430-4624-8E76-6FA8C66E48ED" } ] } diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52315.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52315.json index b17ea2a7c13..90310ba9084 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52315.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52315.json @@ -2,13 +2,13 @@ "id": "CVE-2023-52315", "sourceIdentifier": "paddle-security@baidu.com", "published": "2025-03-17T07:15:33.250", - "lastModified": "2025-03-17T07:15:33.250", + "lastModified": "2025-03-17T15:15:39.193", "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Rejected reason: withdraw" + "value": "Rejected reason: This CVE Record has been withdrawn by its CNA." } ], "metrics": {}, diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52316.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52316.json index 40a7c1560cb..0280b6e526c 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52316.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52316.json @@ -2,13 +2,13 @@ "id": "CVE-2023-52316", "sourceIdentifier": "paddle-security@baidu.com", "published": "2025-03-17T12:15:12.127", - "lastModified": "2025-03-17T12:15:12.127", + "lastModified": "2025-03-17T15:15:39.247", "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Rejected reason: withdraw" + "value": "Rejected reason: This CVE Record has been withdrawn by its CNA." } ], "metrics": {}, diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52317.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52317.json index 06c29df4d0e..5249cce4244 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52317.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52317.json @@ -2,13 +2,13 @@ "id": "CVE-2023-52317", "sourceIdentifier": "paddle-security@baidu.com", "published": "2025-03-17T12:15:12.843", - "lastModified": "2025-03-17T12:15:12.843", + "lastModified": "2025-03-17T15:15:39.297", "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Rejected reason: withdraw" + "value": "Rejected reason: This CVE Record has been withdrawn by its CNA." } ], "metrics": {}, diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52318.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52318.json index a4073c2d987..e9aef811dc2 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52318.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52318.json @@ -2,13 +2,13 @@ "id": "CVE-2023-52318", "sourceIdentifier": "paddle-security@baidu.com", "published": "2025-03-17T12:15:12.923", - "lastModified": "2025-03-17T12:15:12.923", + "lastModified": "2025-03-17T15:15:39.347", "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Rejected reason: withdraw" + "value": "Rejected reason: This CVE Record has been withdrawn by its CNA." } ], "metrics": {}, diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52319.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52319.json index f56ee82cc82..bb1540b005a 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52319.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52319.json @@ -2,13 +2,13 @@ "id": "CVE-2023-52319", "sourceIdentifier": "paddle-security@baidu.com", "published": "2025-03-17T12:15:12.993", - "lastModified": "2025-03-17T12:15:12.993", + "lastModified": "2025-03-17T15:15:39.393", "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Rejected reason: withdraw" + "value": "Rejected reason: This CVE Record has been withdrawn by its CNA." } ], "metrics": {}, diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52320.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52320.json index 62499c31306..ae88e52ce29 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52320.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52320.json @@ -2,13 +2,13 @@ "id": "CVE-2023-52320", "sourceIdentifier": "paddle-security@baidu.com", "published": "2025-03-17T12:15:13.067", - "lastModified": "2025-03-17T12:15:13.067", + "lastModified": "2025-03-17T15:15:39.447", "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Rejected reason: withdraw" + "value": "Rejected reason: This CVE Record has been withdrawn by its CNA." } ], "metrics": {}, diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52321.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52321.json index 1861adcd398..610b7b707ad 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52321.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52321.json @@ -2,13 +2,13 @@ "id": "CVE-2023-52321", "sourceIdentifier": "paddle-security@baidu.com", "published": "2025-03-17T12:15:13.137", - "lastModified": "2025-03-17T12:15:13.137", + "lastModified": "2025-03-17T15:15:39.493", "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Rejected reason: withdraw" + "value": "Rejected reason: This CVE Record has been withdrawn by its CNA." } ], "metrics": {}, diff --git a/CVE-2023/CVE-2023-523xx/CVE-2023-52360.json b/CVE-2023/CVE-2023-523xx/CVE-2023-52360.json index 5527c287db0..7947b15239a 100644 --- a/CVE-2023/CVE-2023-523xx/CVE-2023-52360.json +++ b/CVE-2023/CVE-2023-523xx/CVE-2023-52360.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52360", "sourceIdentifier": "psirt@huawei.com", "published": "2024-02-18T03:15:08.683", - "lastModified": "2025-03-13T14:48:00.200", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:39.547", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -49,6 +49,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-511" + } + ] } ], "configurations": [ diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52621.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52621.json index 39145d14daa..9f82035a307 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52621.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52621.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52621", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T18:15:08.817", - "lastModified": "2024-11-21T08:40:13.260", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:20:01.240", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,130 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: verifique rcu_read_lock_trace_held() antes de llamar a los ayudantes de mapas de bpf. Estos tres ayudantes de bpf_map_{lookup,update,delete}_elem() tambi\u00e9n est\u00e1n disponibles para el programa bpf que se puede dormir, as\u00ed que agregue el bloqueo correspondiente. aserci\u00f3n para el programa bpf con capacidad para dormir; de lo contrario, se informar\u00e1 la siguiente advertencia cuando un programa bpf con capacidad para dormir manipule el mapa bpf en modo int\u00e9rprete (tambi\u00e9n conocido como bpf_jit_enable=0): ADVERTENCIA: CPU: 3 PID: 4985 en kernel/bpf/helpers.c:40. ..... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Seguimiento de llamadas: ? __advertir+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60? report_bug+0x1ba/0x1f0? handle_bug+0x40/0x80? exc_invalid_op+0x18/0x50? asm_exc_invalid_op+0x1b/0x20? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0? rcu_is_watching+0x23/0x50? bpf_map_lookup_elem+0x54/0x60? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entrada_SYSCALL_64_after_hwframe+0x6e/0x76 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.77", + "matchCriteriaId": "F749AC21-58DA-44BE-B3C5-7C53F294A67A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.16", + "matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/169410eba271afc9f0fb476d996795aa26770c6d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/483cb92334cd7f1d5387dccc0ab5d595d27a669d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c7f1b6146f4a46d727c0d046284c28b6882c6304", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d6d6fe4bb105595118f12abeed4a7bdd450853f3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/169410eba271afc9f0fb476d996795aa26770c6d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/483cb92334cd7f1d5387dccc0ab5d595d27a669d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c7f1b6146f4a46d727c0d046284c28b6882c6304", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d6d6fe4bb105595118f12abeed4a7bdd450853f3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52622.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52622.json index ffadb4a212f..7a7bf51930c 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52622.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52622.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52622", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T18:15:08.873", - "lastModified": "2024-11-21T08:40:13.377", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:19:52.373", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,243 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: evita fallos de cambio de tama\u00f1o en l\u00ednea debido a flex bg sobredimensionado Cuando redimensionamos en l\u00ednea un sistema de archivos ext4 con un flexbg_size sobredimensionado, mkfs.ext4 -F -G 67108864 $dev -b 4096 100M mount $dev $dir resize2fs $dev 16G se activa el siguiente WARN_ON: ===================================== ============================== ADVERTENCIA: CPU: 0 PID: 427 en mm/page_alloc.c:4402 __alloc_pages+0x411/ 0x550 M\u00f3dulos vinculados en: sg(E) CPU: 0 PID: 427 Comm: resize2fs Contaminado: GE 6.6.0-rc5+ #314 RIP: 0010:__alloc_pages+0x411/0x550 Seguimiento de llamadas: __kmalloc_large_node+0xa2/0x200 __kmalloc+ 0x16e/0x290 text4_resize_fs+0x481/0xd80 __ext4_ioctl+0x1616/0x1d90 text4_ioctl+0x12/0x20 __x64_sys_ioctl+0xf0/0x150 do_syscall_64+0x3b/0x90 ======== =============== ============================================ Esto se debe a que flexbg_size tambi\u00e9n lo es grande y el tama\u00f1o de la matriz new_group_data que se asignar\u00e1 excede MAX_ORDER. Actualmente, el valor m\u00ednimo de MAX_ORDER es 8, el valor m\u00ednimo de PAGE_SIZE es 4096, el n\u00famero m\u00e1ximo correspondiente de grupos que se pueden asignar es: (PAGE_SIZE << MAX_ORDER) / sizeof(struct text4_new_group_data) ? 21845 Y el valor que est\u00e1 hacia abajo -alineado a la potencia de 2 es 16384. Por lo tanto, este valor se define como MAX_RESIZE_BG, y el n\u00famero de grupos agregados cada vez no excede este valor durante el cambio de tama\u00f1o y se agrega varias veces para completar el cambio de tama\u00f1o en l\u00ednea. La diferencia es que los metadatos en flex_bg pueden estar m\u00e1s dispersos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "4B4E1A83-9957-4265-94C0-516374C8CCFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.77", + "matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.16", + "matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5d1935ac02ca5aee364a449a35e2977ea84509b0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6d2cbf517dcabc093159cf138ad5712c9c7fa954", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b1413dbfe49646eda2c00c0f1144ee9d3368e0c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b183fe8702e78bba3dcef8e7193cab6898abee07", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd1f93ca97a9136989f3bd2bf90696732a2ed644", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cfbbb3199e71b63fc26cee0ebff327c47128a1e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d76c8d7ffe163c6bf2f1ef680b0539c2b3902b90", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc3e0f55bec4410f3d74352c4a7c79f518088ee2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5d1935ac02ca5aee364a449a35e2977ea84509b0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6d2cbf517dcabc093159cf138ad5712c9c7fa954", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b1413dbfe49646eda2c00c0f1144ee9d3368e0c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b183fe8702e78bba3dcef8e7193cab6898abee07", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd1f93ca97a9136989f3bd2bf90696732a2ed644", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cfbbb3199e71b63fc26cee0ebff327c47128a1e8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d76c8d7ffe163c6bf2f1ef680b0539c2b3902b90", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc3e0f55bec4410f3d74352c4a7c79f518088ee2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52624.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52624.json index 6256845f6a0..a32cfc787d1 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52624.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52624.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52624", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T18:15:08.990", - "lastModified": "2024-11-21T08:40:13.703", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:19:42.927", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,88 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Activa DMCUB antes de ejecutar comandos GPINT [Por qu\u00e9] DMCUB puede estar inactivo cuando intentamos interactuar con el HW a trav\u00e9s del buz\u00f3n GPINT, lo que provoca un bloqueo del sistema. [C\u00f3mo] Agregue dc_wake_and_execute_gpint() para ajustar la secuencia de activaci\u00f3n, ejecuci\u00f3n y suspensi\u00f3n. Si GPINT se ejecuta correctamente, DMCUB volver\u00e1 a entrar en modo de suspensi\u00f3n despu\u00e9s de que se devuelva la respuesta opcional. Funciona de manera similar a la interfaz de comando de la bandeja de entrada." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "F13B1885-F67C-4943-BD88-9B68D2C3FF83" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2ef98c6d753a744e333b7e34b9cf687040fba57d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5ffd1263dd5b44929c676171802e7b6af483f21", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ef98c6d753a744e333b7e34b9cf687040fba57d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5ffd1263dd5b44929c676171802e7b6af483f21", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52625.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52625.json index 3a694a5d351..abb75d77ec7 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52625.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52625.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52625", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T18:15:09.040", - "lastModified": "2024-11-21T08:40:13.813", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:19:34.277", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,88 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Refactor DMCUB entra/sale de la interfaz inactiva [Por qu\u00e9] Podemos quedarnos quietos intentando enviar comandos cuando el DMCUB no est\u00e1 encendido. [C\u00f3mo] Necesitamos salir del estado inactivo antes de enviar un comando, pero el proceso que realiza la salida tambi\u00e9n invoca un comando en s\u00ed. Solucionar este problema implica lo siguiente: 1. Usar un estado de software para rastrear si necesitamos o no iniciar el proceso para salir de inactivo o notificarlo. Es posible que el hardware haya salido de un estado inactivo sin el conocimiento del controlador, pero ingresar a uno siempre est\u00e1 restringido a un permiso del controlador, lo que hace que el problema de discrepancia entre el estado del SW y el estado del HW sea puramente de optimizaci\u00f3n, que rara vez deber\u00eda solucionarse, en todo caso. . 2. Refactorice cualquier instancia de salida/notificaci\u00f3n inactiva para utilizar un contenedor \u00fanico que mantenga este estado de software. Esto funciona de manera similar a dc_allow_idle_optimizations, pero funciona en el nivel DMCUB y garantiza que el estado est\u00e9 marcado antes de cualquier notificaci\u00f3n/salida inactiva para que no entremos en un bucle infinito. 3. Aseg\u00farese de salir del modo inactivo antes de enviar cualquier comando o esperar a que DMCUB est\u00e9 inactivo. Este parche se ocupa de la mitad. Un parche futuro se encargar\u00e1 de empaquetar el env\u00edo de comandos DMCUB con llamadas a esta nueva interfaz." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "F13B1885-F67C-4943-BD88-9B68D2C3FF83" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/820c3870c491946a78950cdf961bf40e28c1025f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e57c06bf4b0f51a4d6958e15e1a99c9520d00fa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/820c3870c491946a78950cdf961bf40e28c1025f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e57c06bf4b0f51a4d6958e15e1a99c9520d00fa", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52626.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52626.json index 6f8d06253bd..11fec7a2e73 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52626.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52626.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52626", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T18:15:09.087", - "lastModified": "2024-11-21T08:40:13.930", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:19:21.573", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,115 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net/mlx5e: se corrigi\u00f3 el error de precedencia de operaci\u00f3n en la marca de tiempo del puerto contexto napi_poll La indirecci\u00f3n (*) tiene menor prioridad que el incremento de postfijo (++). La l\u00f3gica en el contexto napi_poll provocar\u00eda una lectura fuera de los l\u00edmites al incrementar primero la direcci\u00f3n del puntero por espacio de direcciones de bytes y luego desreferenciar el valor. M\u00e1s bien, la l\u00f3gica prevista era desreferenciar primero y luego incrementar el valor subyacente." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.3", + "versionEndExcluding": "6.6.15", + "matchCriteriaId": "3EF31C50-F7D0-4813-8646-D31DAD69EAB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/33cdeae8c6fb58cc445f859b67c014dc9f60b4e0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3876638b2c7ebb2c9d181de1191db0de8cac143a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/40e0d0746390c5b0c31144f4f1688d72f3f8d790", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52628.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52628.json index 002eae139ff..10d38b6e0fe 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52628.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52628.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52628", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-28T08:15:25.980", - "lastModified": "2024-11-21T08:40:14.240", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:18:34.223", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,63 +15,180 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nftables: exthdr: corrige escritura OOB de pila de 4 bytes Si priv->len es m\u00faltiplo de 4, entonces dst[len / 4] puede escribir m\u00e1s all\u00e1 de la matriz de destino que conduce a la corrupci\u00f3n de la pila. Esta construcci\u00f3n es necesaria para limpiar el resto del registro en caso de que ->len NO sea un m\u00faltiplo del tama\u00f1o del registro, as\u00ed que h\u00e1galo condicional tal como lo hace nft_payload.c. El error se agreg\u00f3 en el ciclo 4.1 y luego se copi\u00f3/hered\u00f3 cuando se agreg\u00f3 la compatibilidad con las opciones tcp/sctp e ip. Error informado por el proyecto Zero Day Initiative (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.1", + "versionEndExcluding": "5.10.198", + "matchCriteriaId": "BD3CB157-23C2-46B5-AF99-3A3162A9588E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.132", + "matchCriteriaId": "5913891D-409A-4EEC-9231-F2EF5A493BC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.54", + "matchCriteriaId": "7353B9B4-AFFC-45DE-840E-1A7D2B00E7AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.5.4", + "matchCriteriaId": "CA8C8B88-AF36-445D-A228-AD78F3615373" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1ad7b189cc1411048434e8595ffcbe7873b71082", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/28a97c43c9e32f437ebb8d6126f9bb7f3ca9521a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7d86a77c33ba1c357a7504341172cc1507f0698", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c8f292322ff16b9a2272a67de396c09a50e09dce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf39c4f77a773a547ac2bcf30ecdd303bb0c80cb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9ebfc0f21377690837ebbd119e679243e0099cc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fd94d9dadee58e09b49075240fe83423eb1dcd36", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1ad7b189cc1411048434e8595ffcbe7873b71082", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/28a97c43c9e32f437ebb8d6126f9bb7f3ca9521a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7d86a77c33ba1c357a7504341172cc1507f0698", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c8f292322ff16b9a2272a67de396c09a50e09dce", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf39c4f77a773a547ac2bcf30ecdd303bb0c80cb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9ebfc0f21377690837ebbd119e679243e0099cc", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fd94d9dadee58e09b49075240fe83423eb1dcd36", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52632.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52632.json index 5abc6a04feb..16bcd6b86df 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52632.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52632.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52632", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:41.010", - "lastModified": "2024-11-21T08:40:14.790", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:17:57.207", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,130 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: corrige la advertencia de dependencia de bloqueo con srcu ============================== ========================== ADVERTENCIA: posible dependencia de bloqueo circular detectada 6.5.0-kfd-yangp #2289 No contaminado ------ ------------------------------------------------ ktrabajador/ 0:2/996 est\u00e1 intentando adquirir el bloqueo: (srcu){.+.+}-{0:0}, en: __synchronize_srcu+0x5/0x1a0 pero la tarea ya mantiene el bloqueo: ((work_completion)(&svms->deferred_list_work )){+.+.}-{0:0}, en: Process_one_work+0x211/0x560 cuyo bloqueo ya depende del nuevo bloqueo. la cadena de dependencia existente (en orden inverso) es: -> #3 ((work_completion)(&svms->deferred_list_work)){+.+.}-{0:0}: __flush_work+0x88/0x4f0 svm_range_list_lock_and_flush_work+0x3d/0x110 [ amdgpu] svm_range_set_attr+0xd6/0x14c0 [amdgpu] kfd_ioctl+0x1d1/0x630 [amdgpu] __x64_sys_ioctl+0x88/0xc0 -> #2 (&info->lock#2){+.+.}-{3:3}: __mutex_lock+ 0x99/0xc70 amdgpu_amdkfd_gpuvm_restore_process_bos+0x54/0x740 [amdgpu] restaurar_proceso_helper+0x22/0x80 [amdgpu] restaurar_proceso_trabajador+0x2d/0xa0 [amdgpu] proceso_one_work+0x29b/0x560 trabajador_thread+0x3d/0x3d 0 -> #1 ((finalizaci\u00f3n_trabajo)(&(&proceso- >restore_work)->work)){+.+.}-{0:0}: __flush_work+0x88/0x4f0 __cancel_work_timer+0x12c/0x1c0 kfd_process_notifier_release_internal+0x37/0x1f0 [amdgpu] __mmu_notifier_release+0xad/0x240 exit_mmap+0x6a/0x3 a0 mmentrada +0x6a/0x120 do_exit+0x322/0xb90 do_group_exit+0x37/0xa0 __x64_sys_exit_group+0x18/0x20 do_syscall_64+0x38/0x80 -> #0 (srcu){.+.+}-{0:0}: __lock_acquire+0x1521/0x2 510 lock_sync +0x5f/0x90 __synchronize_srcu+0x4f/0x1a0 __mmu_notifier_release+0x128/0x240 exit_mmap+0x6a/0x3a0 mmput+0x6a/0x120 svm_range_deferred_list_work+0x19f/0x350 [amdgpu] Process_one_work+0x29b/0 x560 trabajador_thread+0x3d/0x3d0 otra informaci\u00f3n que podr\u00eda ayudarnos a depurar esto : Existe cadena de: srcu --> &info->lock#2 --> (work_completion)(&svms->deferred_list_work) Posible escenario de bloqueo inseguro: CPU0 CPU1 ---- ---- lock((work_completion)(&svms- >lista_trabajo_diferido)); bloquear(&info->bloquear#2); lock((work_completion)(&svms->deferred_list_work)); sincronizaci\u00f3n(srcu);" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.77", + "matchCriteriaId": "F749AC21-58DA-44BE-B3C5-7C53F294A67A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.16", + "matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1556c242e64cdffe58736aa650b0b395854fe4d4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2a9de42e8d3c82c6990d226198602be44f43f340", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/752312f6a79440086ac0f9b08d7776870037323c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b602f098f716723fa5c6c96a486e0afba83b7b94", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1556c242e64cdffe58736aa650b0b395854fe4d4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2a9de42e8d3c82c6990d226198602be44f43f340", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/752312f6a79440086ac0f9b08d7776870037323c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b602f098f716723fa5c6c96a486e0afba83b7b94", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52633.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52633.json index b8d07a856a8..2ba3a84a7f6 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52633.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52633.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52633", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:41.097", - "lastModified": "2024-11-21T08:40:14.913", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:17:46.350", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,151 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: um: viaje en el tiempo: corrige la corrupci\u00f3n del tiempo En el modo de viaje en el tiempo 'b\u00e1sico' (sin =inf-cpu o =ext), todav\u00eda obtenemos interrupciones del temporizador. Esto puede suceder en momentos arbitrarios en el tiempo, es decir, mientras est\u00e1 en timer_read(), lo que adelanta un poco el tiempo. Luego, si recibimos la interrupci\u00f3n despu\u00e9s de calcular el nuevo tiempo al que enviar, pero antes de finalizarlo, la interrupci\u00f3n establecer\u00e1 el tiempo en un valor que es incompatible con el avance, y fallaremos porque el tiempo retrocede cuando hacer el reenv\u00edo. Solucione este problema leyendo time_travel_time, calculando el ajuste y realizando el ajuste, todo con las interrupciones desactivadas." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 5.0, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.3, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "78D569F8-1D0B-426D-84B5-EFFE28C63F33" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.77", + "matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.16", + "matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0c7478a2da3f5fe106b4658338873d50c86ac7ab", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f7dad73df4cdb2b7042103d3922745d040ad025", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/abe4eaa8618bb36c2b33e9cdde0499296a23448c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b427f55e9d4185f6f17cc1e3296eb8d0c4425283", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de3e9d8e8d1ae0a4d301109d1ec140796901306c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0c7478a2da3f5fe106b4658338873d50c86ac7ab", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f7dad73df4cdb2b7042103d3922745d040ad025", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/abe4eaa8618bb36c2b33e9cdde0499296a23448c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b427f55e9d4185f6f17cc1e3296eb8d0c4425283", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de3e9d8e8d1ae0a4d301109d1ec140796901306c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52634.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52634.json index 18972c5dd9c..ee42b9aa2eb 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52634.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52634.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52634", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:41.177", - "lastModified": "2024-11-21T08:40:15.037", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:17:36.907", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,88 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: corrige la l\u00f3gica enable_otg_wa [Por qu\u00e9] Cuando cambiamos a otro modo HDMI, deshabilitamos/habilitamos FIFO innecesariamente, lo que hace que los registros HPO y DIG se configuren al mismo tiempo. momento en el que se supone que s\u00f3lo se debe configurar HPO. Esto puede provocar que el sistema se cuelgue la pr\u00f3xima vez que cambiemos las frecuencias de actualizaci\u00f3n, ya que hay casos en los que no deshabilitamos OTG/FIFO pero FIFO est\u00e1 habilitado cuando no deber\u00eda estarlo. [C\u00f3mo] Eliminar completamente la activaci\u00f3n/desactivaci\u00f3n de FIFO." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "700BC119-5E42-40C5-98D6-59BFBDFAB9A9" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2ce156482a6fef349d2eba98e5070c412d3af662", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce29728ef6485a367934cc100249c66dd3cde5b6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ce156482a6fef349d2eba98e5070c412d3af662", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce29728ef6485a367934cc100249c66dd3cde5b6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52635.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52635.json index ce049bc4891..a70f10b4c07 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52635.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52635.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52635", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:41.260", - "lastModified": "2024-11-21T08:40:15.147", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:13:50.523", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,59 +15,194 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PM / devfreq: Sincronizar devfreq_monitor_[start/stop] Existe la posibilidad de que un cambio frecuente del gobernador realizado en un bucle provoque corrupci\u00f3n en la lista de temporizadores, donde la cancelaci\u00f3n del temporizador se realiza desde dos coloque uno de cancel_delayed_work_sync() y seguido de expire_timers() se puede ver en los rastros [1]. mientras que es verdadero, haga echo \"simple_ondemand\" > /sys/class/devfreq/1d84000.ufshc/governor echo \"rendimiento\" > /sys/class/devfreq/1d84000.ufshc/governor done Parece ser un problema con el controlador devfreq donde device_monitor_[start /stop] debe sincronizarse para que el trabajo retrasado se corrompa mientras est\u00e1 en cola, ejecut\u00e1ndose o cancel\u00e1ndose. Usemos el indicador de sondeo y el bloqueo devfreq para sincronizar la cola de la instancia del temporizador dos veces y los datos de trabajo que se corrompen. [1] ... .. -0 [003] 9436.209662: timer_cancel timer=0xffffff80444f0428 -0 [003] 9436.209664: timer_expire_entry timer=0xffffff80444f0428 now=0x10022da1c function=__typeid__ZTS FvP10timer_listE_global_addr baseclk=0x10022da1c -0 [003] 9436.209718: timer_expire_exit timer=0xffffff80444f0428 kworker/u16:6-14217 [003] 9436.209863: timer_start timer=0xffffff80444f0428 function=__typeid__ZTSFvP10timer_listE_global_addr expira = 0x10022da2b ahora = 0x10022da1c banderas = 182452227 proveedor.xxxyyy.ha-1593 [004] 9436.209888: timer_cancel temporizador=0xffffff80444f0428 proveedor.xxxyyy.ha-1593 [004] 9436.216390: timer_init temporizador=0xffffff80444f0428 proveedor.xxxyyy.ha-1593 [004] 9436.216392: timer_start temporizador=0xffffff80444f042 8 funci\u00f3n=__typeid__ZTSFvP10timer_listE_global_addr expires=0x10022da2c ahora=0x10022da1d flags=186646532 proveedor.xxxyyy .ha-1593 [005] 9436.220992: timer_cancel timer=0xffffff80444f0428 xxxyyyTraceManag-7795 [004] 9436.261641: timer_cancel timer=0xffffff80444f0428 [2] 9436.261653][ C4] No se puede para manejar la solicitud de paginaci\u00f3n del kernel en la direcci\u00f3n virtual dead00000000012a [ 9436.261664][ C4] Mem informaci\u00f3n de cancelaci\u00f3n: [ 9436.261666][ C4] ESR = 0x96000044 [ 9436.261669][ C4] EC = 0x25: DABT (EL actual), IL = 32 bits [ 9436.261671][ C4] SET = 0, FnV = 0 [ 9436.261673][ C4 ] EA = 0, S1PTW = 0 [ 9436.261675][ C4] Informaci\u00f3n de cancelaci\u00f3n de datos: [ 9436.261677][ C4] ISV = 0, ISS = 0x00000044 [ 9436.261680][ C4] CM = 0, WnR = 1 [ 9436.261682][ C4] [dead00000000012a] direcci\u00f3n entre los rangos de direcciones del usuario y del kernel [ 9436.261685][ C4] Error interno: Vaya: 96000044 [#1] SMP PREEMPT [ 9436.261701][ C4] Omitir el volcado del b\u00fafer md ftrace para: 0x3a982d0 ... [ 9436.262138][ C4 ] CPU: 4 PID: 7795 Comunicaciones: TraceManag Tainted: GSWO 5.10.149-android12-9-o-g17f915d29d0c #1 [ 9436.262141][ C4] Nombre de hardware: Qualcomm Technologies, Inc. (DT) [ 9436.262144][ C4] pstate : 22400085 (nzCv daIf +PAN -UAO +TCO BTYPE=--) [ 9436.262161][ C4] pc : expire_timers+0x9c/0x438 [ 9436.262164][ C4] lr : expire_timers+0x2a4/0x438 [ 9436.262168][ C4] sp : ffffffc010023dd0 [ 9436.262171][ C4] x29: ffffffc010023df0 x28: ffffffd0636fdc18 [ 9436.262178][ C4] x27: ffffffd063569dd0 x26: ffffffd063536008 [ 9436 .262182][ C4] x25: 0000000000000001 x24: ffffff88f7c69280 [ 9436.262185][ C4] x23: 00000000000000e0 x22: muerto000000000122 [ 9436.262188][ C4] x21: 000000010022da29 x20: ffffff8af72b4e80 [ 9436.262191][ C4] x19: ffffffc010023e50 x18: ffffffc010025038 [ 9436.262195][ C4] x 17: 0000000000000240 x16: 0000000000000201 [ 9436.262199][ C4] x15: ffffffffffffffff x14: ffffff889f3c3100 [ 9436.262203] [ C4] x13: ffffff889f3c3100 x12: 00000000049f56b8 [ 9436.262207][ C4] x11: 00000000049f56b8 x10: 00000000ffffffff [ 9436.262212][ C4] x9 : ffffffc0 10023e50 x8: muerto000000000122 [9436.262216][C4] x7: ffffffffffffffff x6: ffffffc0100239d8 [9436.262220][C4 ]---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-835" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "24443040-F8E0-445D-8395-40A94214526C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.77", + "matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.16", + "matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/099f6a9edbe30b142c1d97fe9a4748601d995675", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0aedb319ef3ed39e9e5a7b7726c8264ca627bbd9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/31569995fc65007b73a3fff605ec2b3401b435e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3399cc7013e761fee9d6eec795e9b31ab0cbe475", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ae815e2fdc284ab31651d52460698bd89c0fce22", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aed5ed595960c6d301dcd4ed31aeaa7a8054c0c6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/099f6a9edbe30b142c1d97fe9a4748601d995675", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0aedb319ef3ed39e9e5a7b7726c8264ca627bbd9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/31569995fc65007b73a3fff605ec2b3401b435e9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3399cc7013e761fee9d6eec795e9b31ab0cbe475", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ae815e2fdc284ab31651d52460698bd89c0fce22", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aed5ed595960c6d301dcd4ed31aeaa7a8054c0c6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52636.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52636.json index 6ce1f776818..cb138d67f5f 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52636.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52636.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52636", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:41.337", - "lastModified": "2024-11-21T08:40:15.277", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:13:38.217", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,125 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: \"libceph: just wait for more data to be available on the socket\". Puede ocurrir una lectura breve mientras se lee el pie de p\u00e1gina del mensaje desde el socket. M\u00e1s tarde, cuando el socket est\u00e1 listo para otra lectura, el mensajero invoca todos los controladores read_partial_*(), incluido read_partial_sparse_msg_data(). La expectativa es que read_partial_sparse_msg_data() saldr\u00eda, permitiendo al mensajero invocar read_partial() para el pie de p\u00e1gina y continuar donde lo dej\u00f3. Sin embargo, read_partial_sparse_msg_data() viola eso y termina llamando a la m\u00e1quina de estado en el cliente OSD. La m\u00e1quina de estado de lectura dispersa asume que es una nueva operaci\u00f3n e interpreta alguna parte del pie de p\u00e1gina como el encabezado de lectura dispersa y devuelve extensiones/longitud de datos falsas, etc. Para determinar si read_partial_sparse_msg_data() debe rescatarse, reutilicemos cursor->total_resid . Porque una vez que llega a cero, significa que todas las extensiones y datos se recibieron correctamente en la \u00faltima lectura; de lo contrario, podr\u00eda romperse al leer parcialmente cualquiera de las extensiones y datos. Y luego osd_sparse_read() podr\u00eda continuar donde lo dej\u00f3. [idryomov: registro de cambios]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "0B77B682-A9FE-43C2-9370-B5523C080B80" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/8e46a2d068c92a905d01cbb018b00d66991585ab", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd9442e553ab8bf74b8be3b3c0a43bf4af4dc9b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/da9c33a70f095d5d55c36d0bfeba969e31de08ae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e46a2d068c92a905d01cbb018b00d66991585ab", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd9442e553ab8bf74b8be3b3c0a43bf4af4dc9b8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/da9c33a70f095d5d55c36d0bfeba969e31de08ae", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52639.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52639.json index 904ffe11034..754327bd657 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52639.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52639.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52639", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:51.467", - "lastModified": "2024-11-21T08:40:15.663", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:40:20.033", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,146 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: KVM: s390: vsie: corrige la ejecuci\u00f3n durante la creaci\u00f3n de la sombra. En este momento es posible ver que gmap->private es cero en kvm_s390_vsie_gmap_notifier, lo que provoca un bloqueo. Esto se debe al hecho de que agregamos gmap->private == kvm despu\u00e9s de la creaci\u00f3n: static int adquirir_gmap_shadow(struct kvm_vcpu *vcpu, struct vsie_page *vsie_page) { [...] gmap = gmap_shadow(vcpu->arch.gmap, asce, edat); si (IS_ERR(gmap)) devuelve PTR_ERR(gmap); gmap->privado = vcpu->kvm; Deje que los ni\u00f1os hereden el campo privado del padre." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.8", + "versionEndExcluding": "6.1.82", + "matchCriteriaId": "CF875774-2060-479B-8422-FF0D07235FE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.22", + "matchCriteriaId": "AC6FD6F8-5B16-4F53-8116-D42F4BF4FBAC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/28bb27824f25f36e5f80229a358d66ee09244082", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5df3b81a567eb565029563f26f374ae3803a1dfc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f5572c0323cf8b4f1f0618178648a25b8fb8a380", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe752331d4b361d43cfd0b89534b4b2176057c32", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/28bb27824f25f36e5f80229a358d66ee09244082", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5df3b81a567eb565029563f26f374ae3803a1dfc", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f5572c0323cf8b4f1f0618178648a25b8fb8a380", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe752331d4b361d43cfd0b89534b4b2176057c32", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-60xx/CVE-2023-6080.json b/CVE-2023/CVE-2023-60xx/CVE-2023-6080.json index bdb0ccbf886..994b9593019 100644 --- a/CVE-2023/CVE-2023-60xx/CVE-2023-6080.json +++ b/CVE-2023/CVE-2023-60xx/CVE-2023-6080.json @@ -2,8 +2,8 @@ "id": "CVE-2023-6080", "sourceIdentifier": "mandiant-cve@google.com", "published": "2024-10-18T17:15:12.353", - "lastModified": "2024-10-30T20:12:50.090", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:19.670", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, diff --git a/CVE-2024/CVE-2024-02xx/CVE-2024-0258.json b/CVE-2024/CVE-2024-02xx/CVE-2024-0258.json index 2178c1bc1b5..7fbdb5b8033 100644 --- a/CVE-2024/CVE-2024-02xx/CVE-2024-0258.json +++ b/CVE-2024/CVE-2024-02xx/CVE-2024-0258.json @@ -2,8 +2,8 @@ "id": "CVE-2024-0258", "sourceIdentifier": "product-security@apple.com", "published": "2024-03-08T02:15:47.293", - "lastModified": "2024-12-05T17:02:34.657", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:20.277", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -69,6 +69,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13602.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13602.json index a22f4db85f5..6b9a4093765 100644 --- a/CVE-2024/CVE-2024-136xx/CVE-2024-13602.json +++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13602.json @@ -2,16 +2,43 @@ "id": "CVE-2024-13602", "sourceIdentifier": "contact@wpscan.com", "published": "2025-03-16T06:15:12.467", - "lastModified": "2025-03-16T06:15:12.467", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:20.623", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)." + }, + { + "lang": "es", + "value": "El complemento Poll Maker para WordPress anterior a la versi\u00f3n 5.5.4 no depura ni escapa de algunas de sus configuraciones, lo que podr\u00eda permitir a usuarios con privilegios elevados como el administrador realizar ataques de cross-site scripting almacenado incluso cuando la capacidad unfiltered_html no est\u00e1 permitida (por ejemplo, en una configuraci\u00f3n de varios sitios)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, "references": [ { "url": "https://wpscan.com/vulnerability/05d5010b-94eb-4fd3-b962-e2a16c032b71/", diff --git a/CVE-2024/CVE-2024-209xx/CVE-2024-20999.json b/CVE-2024/CVE-2024-209xx/CVE-2024-20999.json index 18ebefd8ff9..8e09f4f842e 100644 --- a/CVE-2024/CVE-2024-209xx/CVE-2024-20999.json +++ b/CVE-2024/CVE-2024-209xx/CVE-2024-20999.json @@ -2,8 +2,8 @@ "id": "CVE-2024-20999", "sourceIdentifier": "secalert_us@oracle.com", "published": "2024-04-16T22:15:13.350", - "lastModified": "2024-11-27T16:36:14.473", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:39.887", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", @@ -49,6 +49,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-250" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-210xx/CVE-2024-21010.json b/CVE-2024/CVE-2024-210xx/CVE-2024-21010.json index 06e03c9d2e1..28089fe0096 100644 --- a/CVE-2024/CVE-2024-210xx/CVE-2024-21010.json +++ b/CVE-2024/CVE-2024-210xx/CVE-2024-21010.json @@ -2,8 +2,8 @@ "id": "CVE-2024-21010", "sourceIdentifier": "secalert_us@oracle.com", "published": "2024-04-16T22:15:15.260", - "lastModified": "2024-11-27T16:35:37.613", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:40.073", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", @@ -49,6 +49,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-210xx/CVE-2024-21014.json b/CVE-2024/CVE-2024-210xx/CVE-2024-21014.json index 4f01c76f3b9..54502c325b4 100644 --- a/CVE-2024/CVE-2024-210xx/CVE-2024-21014.json +++ b/CVE-2024/CVE-2024-210xx/CVE-2024-21014.json @@ -2,8 +2,8 @@ "id": "CVE-2024-21014", "sourceIdentifier": "secalert_us@oracle.com", "published": "2024-04-16T22:15:15.967", - "lastModified": "2024-11-27T16:35:17.047", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:20.833", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", @@ -49,6 +49,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-210xx/CVE-2024-21083.json b/CVE-2024/CVE-2024-210xx/CVE-2024-21083.json index 0b86d57b157..44e73bf7250 100644 --- a/CVE-2024/CVE-2024-210xx/CVE-2024-21083.json +++ b/CVE-2024/CVE-2024-210xx/CVE-2024-21083.json @@ -2,8 +2,8 @@ "id": "CVE-2024-21083", "sourceIdentifier": "secalert_us@oracle.com", "published": "2024-04-16T22:15:27.953", - "lastModified": "2024-12-05T15:17:58.973", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:40.223", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", @@ -49,6 +49,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-216xx/CVE-2024-21685.json b/CVE-2024/CVE-2024-216xx/CVE-2024-21685.json index 270b3e5d80a..92dbb412ee2 100644 --- a/CVE-2024/CVE-2024-216xx/CVE-2024-21685.json +++ b/CVE-2024/CVE-2024-216xx/CVE-2024-21685.json @@ -2,8 +2,8 @@ "id": "CVE-2024-21685", "sourceIdentifier": "security@atlassian.com", "published": "2024-06-18T17:15:51.243", - "lastModified": "2025-02-19T16:00:53.703", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:40.387", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -71,6 +71,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-220xx/CVE-2024-22058.json b/CVE-2024/CVE-2024-220xx/CVE-2024-22058.json index 5921739366d..4ac45c1f8d1 100644 --- a/CVE-2024/CVE-2024-220xx/CVE-2024-22058.json +++ b/CVE-2024/CVE-2024-220xx/CVE-2024-22058.json @@ -2,7 +2,7 @@ "id": "CVE-2024-22058", "sourceIdentifier": "support@hackerone.com", "published": "2024-05-31T18:15:10.317", - "lastModified": "2024-11-21T08:55:28.643", + "lastModified": "2025-03-17T16:15:21.007", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -39,6 +39,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], "references": [ { "url": "https://forums.ivanti.com/s/article/CVE-2024-22058-Privilege-Escalation-for-Ivanti-Endpoint-Manager-EPM", diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26644.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26644.json index 3f88c289220..ca1b91ae7a7 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26644.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26644.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26644", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T16:15:12.137", - "lastModified": "2024-11-21T09:02:45.230", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:20:20.027", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,59 +15,199 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: no aborte el sistema de archivos al intentar crear una instant\u00e1nea del subvolumen eliminado. Si el descriptor del archivo fuente de la instant\u00e1nea ioctl se refiere a un subvolumen eliminado, obtenemos la siguiente cancelaci\u00f3n: BTRFS: transacci\u00f3n abortada (error -2) ADVERTENCIA: CPU: 0 PID: 833 en fs/btrfs/transaction.c:1875 create_pending_snapshot+0x1040/0x1190 [btrfs] M\u00f3dulos vinculados en: pata_acpi btrfs ata_piix libata scsi_mod virtio_net blake2b_generic xor net_failover virtio_rng failover scsi_common rng_core raid6_pq libcrc32c CPU: 0 PID: 833 Comm: t_snapshot_dele No contaminado 6.7.0-rc6 #2 Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 01/04/2014 RIP: 0010:create_pending_snapshot +0x1040/0x1190 [btrfs] RSP: 0018:ffffa09c01337af8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff9982053e7c78 RCX: 0000000000000027 RDX: ffff99 827dc20848 RSI: 0000000000000001 RDI: ffff99827dc20840 RBP: ffffa09c01337c00 R08: 00000000000000000 R09: ffffa09c01337998 R10: 000000000000000003 R11: ffffffffb96da248 R12: fffffffffffffffe R13: ffff99820535bb28 R14: ffff99820b7bd000 R15: ffff99820381ea80 FS: 00007fe20aadabc0(0000) GS:ffff99827dc00000(0000) knlGS:000000000000 0000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000559a120b502f CR3: 00000000055b6000 CR4: 00000000000006f0 Rastreo de llamadas: < TAREA> ? create_pending_snapshot+0x1040/0x1190 [btrfs]? __advertir+0x81/0x130 ? create_pending_snapshot+0x1040/0x1190 [btrfs]? report_bug+0x171/0x1a0? handle_bug+0x3a/0x70? exc_invalid_op+0x17/0x70? asm_exc_invalid_op+0x1a/0x20? create_pending_snapshot+0x1040/0x1190 [btrfs]? create_pending_snapshot+0x1040/0x1190 [btrfs] create_pending_snapshots+0x92/0xc0 [btrfs] btrfs_commit_transaction+0x66b/0xf40 [btrfs] btrfs_mksubvol+0x301/0x4d0 [btrfs] btrfs_mksnapshot+0x8 0/0xb0 [btrfs] __btrfs_ioctl_snap_create+0x1c2/0x1d0 [btrfs] btrfs_ioctl_snap_create_v2+ 0xc4/0x150 [btrfs] btrfs_ioctl+0x8a6/0x2650 [btrfs] ? kmem_cache_free+0x22/0x340? do_sys_openat2+0x97/0xe0 __x64_sys_ioctl+0x97/0xd0 do_syscall_64+0x46/0xf0 Entry_SYSCALL_64_after_hwframe+0x6e/0x76 RIP: 0033:0x7fe20abe83af RSP: 002b:00007ffe6eff13 60 EFLAGS: 00000246 ORIG_RAX: 00000000000000010 RAX: ffffffffffffffda RBX: 00000000000000004 RCX: 00007fe20abe83af RDX: 00007ffe6eff23c0 RSI: 0000000050009417 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fe20ad16cd0 R10: 0000000000000000 R11: 00 00000000000246 R12: 0000000000000000 R13: 00007ffe6eff13c0 R14: 00007fe20ad45000 R15: 0000559a120b6d58 ---[ final de seguimiento 0000000000000000 ]--- BTRFS: error ( dispositivo vdc: estado A) en create_pending_snapshot:1875: errno=-2 No existe tal entrada Informaci\u00f3n BTRFS (dispositivo vdc: estado EA): solo lectura forzada Advertencia BTRFS (dispositivo vdc: estado EA): omitir confirmaci\u00f3n de transacci\u00f3n abortada. BTRFS: error (dispositivo vdc: estado EA) en cleanup_transaction:2055: errno=-2 No existe tal entrada. Esto sucede porque create_pending_snapshot() inicializa el nuevo elemento ra\u00edz como una copia del elemento ra\u00edz de origen. Esto incluye el campo de referencias, que es 0 para un subvolumen eliminado. Por lo tanto, la llamada a btrfs_insert_root() inserta una ra\u00edz con refs == 0. btrfs_get_new_fs_root() luego encuentra la ra\u00edz y devuelve -ENOENT si refs == 0, lo que hace que create_pending_snapshot() aborte. Solucionelo verificando las referencias de la ra\u00edz de origen antes de intentar la instant\u00e1nea, pero despu\u00e9s de bloquear subvol_sem para evitar correr con la eliminaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-908" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "24443040-F8E0-445D-8395-40A94214526C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.76", + "matchCriteriaId": "32F0FEB3-5FE1-4400-A56D-886F09BE872E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.15", + "matchCriteriaId": "87C718CB-AE3D-4B07-B4D9-BFF64183C468" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0877497dc97834728e1b528ddf1e1c484292c29c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2bdf872bcfe629a6202ffd6641615a8ed00e8464", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e6bca99e8d88d989a7cde4c064abea552d5219b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7081929ab2572920e94d70be3d332e5c9f97095a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d8680b722f0ff6d7a01ddacc1844e0d52354d6ff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec794a7528199e1be6d47bec03f4755aa75df256", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0877497dc97834728e1b528ddf1e1c484292c29c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2bdf872bcfe629a6202ffd6641615a8ed00e8464", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e6bca99e8d88d989a7cde4c064abea552d5219b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7081929ab2572920e94d70be3d332e5c9f97095a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d8680b722f0ff6d7a01ddacc1844e0d52354d6ff", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec794a7528199e1be6d47bec03f4755aa75df256", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26645.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26645.json index 58e6bd72066..864365ada4b 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26645.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26645.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26645", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T16:15:12.207", - "lastModified": "2024-11-21T09:02:45.353", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:20:10.733", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,242 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rastreo: garantiza la visibilidad al insertar un elemento en tracing_map La ejecuci\u00f3n de los siguientes dos comandos en paralelo en una m\u00e1quina multiprocesador AArch64 puede producir espor\u00e1dicamente una advertencia inesperada sobre entradas de histograma duplicadas: $ while true ; hacer echo hist:key=id.syscall:val=hitcount > \\ /sys/kernel/debug/tracing/events/raw_syscalls/sys_enter/trigger cat /sys/kernel/debug/tracing/events/raw_syscalls/sys_enter/hist sleep 0.001 done $ estr\u00e9s-ng --sysbadaddr $(nproc) La advertencia tiene el siguiente aspecto: [ 2911.172474] ------------[ cortar aqu\u00ed ]------------ [ 2911.173111] Duplicados detectados: 1 [2911.173574] ADVERTENCIA: CPU: 2 PID: 12247 en kernel/trace/tracing_map.c:983 tracing_map_sort_entries+0x3e0/0x408 [2911.174702] M\u00f3dulos vinculados en: iscsi_ibft(E) iscsi_boot_sy sfs(E) rfkill(E ) af_packet(E) nls_iso8859_1(E) nls_cp437(E) vfat(E) fat(E) ena(E) tiny_power_button(E) qemu_fw_cfg(E) bot\u00f3n(E) fusible(E) efi_pstore(E) ip_tables(E) x_tables (E) xfs(E) libcrc32c(E) aes_ce_blk(E) aes_ce_cipher(E) crct10dif_ce(E) polyval_ce(E) polyval_generic(E) ghash_ce(E) gf128mul(E) sm4_ce_gcm(E) sm4_ce_ccm(E) sm4_ce(E ) sm4_ce_cipher(E) sm4(E) sm3_ce(E) sm3(E) sha3_ce(E) sha512_ce(E) sha512_arm64(E) sha2_ce(E) sha256_arm64(E) nvme(E) sha1_ce(E) nvme_core(E) nvme_auth (E) t10_pi(E) sg(E) scsi_mod(E) scsi_common(E) efivarfs(E) [ 2911.174738] M\u00f3dulos contaminados descargados: cppc_cpufreq(E):1 [ 2911.180985] CPU: 2 PID: 12247 Comm: cat Kdump: cargado Contaminado: GE 6.7.0-default #2 1b58bbb22c97e4399dc09f92d309344f69c44a01 [2911.182398] Nombre de hardware: Amazon EC2 c7g.8xlarge/, BIOS 1.0 1/11/2018 [2911.183208] pstate: 6140 0005 (nZCv daif +PAN -UAO -TCO +DIT - SSBS BTYPE=--) [ 2911.184038] pc : tracing_map_sort_entries+0x3e0/0x408 [ 2911.184667] lr : tracing_map_sort_entries+0x3e0/0x408 [ 2911.185310] sp : ffff8000a1513900 [ 2911.18 5750] x29: ffff8000a1513900 x28: ffff0003f272fe80 x27: 0000000000000001 [ 2911.186600] x26: ffff0003f272fe80 x25: 0000000000000030 x24: 00000000000000008 [ 2911.187458] x23: ffff0003c5788000 x22: ffff0003c16710c8 x21: ffff80008017f180 [ 2911.1883 10] x20: ffff80008017f000 x19: ffff80008017f180 x18: ffffffffffffffff [ 2911.189160] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000a151 34b8 [2911.190015] x14: 0000000000000000 x13: 205d373432323154 x12: 5b5d313131333731 [ 2911.190844] x11: 00000000fffeffff x10: 00000000fffeffff x9 : ffffd1b78274a13c [ 2911.191716] x8 : 00 0000000017ffe8 x7: c0000000fffeffff x6: 000000000057ffa8 [2911.192554] x5: ffff0012f6c24ec0 x4: 00000000000000000 x3: ffff2e5b72b5d000 [2911.193 404] x2: 0000000000000000 x1: 0000000000000000 x0 : ffff0003ff254480 [2911.194259] Rastreo de llamadas: [2911.194626] tracing_map_sort_entries+0x3e0/0x408 [2911.195220] hist_show+0x124/0x800 [2911.195692] seq_read_iter+0x1d4 /0x4e8 [ 2911.196193] seq_read+0xe8/0x138 [ 2911.196638] vfs_read+0xc8/0x300 [ 2911.197078 ] ksys_read+0x70/0x108 [ 2911.197534] __arm64_sys_read+0x24/0x38 [ 2911.198046] invoke_syscall+0x78/0x108 [ 2911.198553] el0_svc_common.constprop.0+0xd0/0x f8 [ 2911.199157] do_el0_svc+0x28/0x40 [ 2911.199613] el0_svc+0x40/0x178 [ 2911.200048] el0t_64_sync_handler+0x13c/0x158 [ 2911.200621] el0t_64_sync+0x1a8/0x1b0 [ 2911.201115] ---[ end trace 0000000000000000 ]--- El problema parece deberse a la reordenaci\u00f3n de la CPU de escrituras emitidas desde __tracing_map_insert(). La comprobaci\u00f3n de la presencia de un elemento con una clave determinada en esta funci\u00f3n es: val = READ_ONCE(entry->val); if (val && llaves_match(key, val->key, map->key_size)) ... La escritura de una nueva entrada es: elt = get_free_elt(map); memcpy(elt->clave, clave, mapa->key_size); entrada->val = elt; El \"memcpy(elt->key, key, map->key_size);\" y \"entrada->val = elt;\" Las tiendas pueden volverse visibles en orden inverso en otra CPU.---truncada---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.17", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "A818642C-7146-404A-BB47-104AA9A3D9B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.76", + "matchCriteriaId": "32F0FEB3-5FE1-4400-A56D-886F09BE872E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "87A6E3AA-41BE-4944-8C69-F09D6A578010" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2b44760609e9eaafc9d234a6883d042fc21132a7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5022b331c041e8c54b9a6a3251579bd1e8c0fc0b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a1eebe76e187dbe11ca299f8dbb6e45d5b1889e7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aef1cb00856ccfd614467cfb50b791278992e177", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bf4aeff7da85c3becd39fb73bac94122331c30fb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dad9b28f675ed99b4dec261db2a397efeb80b74c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef70dfa0b1e5084f32635156c9a5c795352ad860", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f4f7e696db0274ff560482cc52eddbf0551d4b7a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2b44760609e9eaafc9d234a6883d042fc21132a7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5022b331c041e8c54b9a6a3251579bd1e8c0fc0b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a1eebe76e187dbe11ca299f8dbb6e45d5b1889e7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aef1cb00856ccfd614467cfb50b791278992e177", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bf4aeff7da85c3becd39fb73bac94122331c30fb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dad9b28f675ed99b4dec261db2a397efeb80b74c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef70dfa0b1e5084f32635156c9a5c795352ad860", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f4f7e696db0274ff560482cc52eddbf0551d4b7a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26646.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26646.json index e90eb2f9bd5..a72334a3f1e 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26646.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26646.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26646", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-26T18:15:09.910", - "lastModified": "2024-11-21T09:02:45.490", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:19:07.240", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,130 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: t\u00e9rmica: intel: hfi: agregar devoluciones de llamada de syscore para PM en todo el sistema El kernel asigna un b\u00fafer de memoria y proporciona su ubicaci\u00f3n al hardware, que lo utiliza para actualizar la tabla HFI. Esta asignaci\u00f3n ocurre durante el arranque y permanece constante durante el tiempo de ejecuci\u00f3n. Al salir de la hibernaci\u00f3n, el kernel de restauraci\u00f3n asigna un segundo b\u00fafer de memoria y reprograma el hardware HFI con la nueva ubicaci\u00f3n como parte de un inicio normal. La ubicaci\u00f3n del segundo b\u00fafer de memoria puede diferir de la asignada por el n\u00facleo de la imagen. Cuando el kernel de restauraci\u00f3n transfiere el control al kernel de imagen, su b\u00fafer HFI deja de ser v\u00e1lido, lo que puede provocar da\u00f1os en la memoria si el hardware escribe en \u00e9l (el hardware contin\u00faa usando el b\u00fafer del kernel de restauraci\u00f3n). Tambi\u00e9n es posible que el hardware \"olvide\" la direcci\u00f3n del b\u00fafer de memoria al reanudar desde una suspensi\u00f3n \"profunda\". En tal escenario tambi\u00e9n puede ocurrir corrupci\u00f3n de memoria. Para evitar la corrupci\u00f3n de memoria descrita, desactive HFI cuando se prepare para suspender o hibernar. Habil\u00edtelo al reanudar. Agregue devoluciones de llamada de syscore para manejar el paquete de la CPU de arranque (los paquetes de CPU que no son de arranque se manejan a trav\u00e9s de la CPU sin conexi\u00f3n). Las operaciones de Syscore siempre se ejecutan en la CPU de arranque. Adem\u00e1s, HFI solo necesita desactivarse durante la suspensi\u00f3n e hibernaci\u00f3n \"profundas\". Las operaciones de Syscore solo se ejecutan en estos casos. [rjw: ajuste de comentarios, ediciones de asunto y registro de cambios]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.76", + "matchCriteriaId": "33408013-A3FE-4172-A714-468779AB88BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.15", + "matchCriteriaId": "87C718CB-AE3D-4B07-B4D9-BFF64183C468" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/019ccc66d56a696a4dfee3bfa2f04d0a7c3d89ee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/28f010dc50df0f7987c04112114fcfa7e0803566", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97566d09fd02d2ab329774bb89a2cdf2267e86d9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9d6d63b6c03afaa6f185df249af693a7939577c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/019ccc66d56a696a4dfee3bfa2f04d0a7c3d89ee", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/28f010dc50df0f7987c04112114fcfa7e0803566", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97566d09fd02d2ab329774bb89a2cdf2267e86d9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9d6d63b6c03afaa6f185df249af693a7939577c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26651.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26651.json index 253318c3550..28b1204bae2 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26651.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26651.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26651", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-03-27T14:15:10.243", - "lastModified": "2024-11-21T09:02:46.027", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:18:55.783", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,87 +15,250 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: sr9800: Agregar verificaci\u00f3n para usbnet_get_endpoints Agregar verificaci\u00f3n para usbnet_get_endpoints() y devolver el error si falla para transferir el error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.14", + "versionEndExcluding": "4.19.311", + "matchCriteriaId": "02E244F7-B1F4-437A-81EF-58FE9A1B39B4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.273", + "matchCriteriaId": "620FD8B7-BF03-43E0-951A-0A58461D4C55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.214", + "matchCriteriaId": "65987874-467B-4D3B-91D6-68A129B34FB8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.153", + "matchCriteriaId": "ACB69438-845D-4E3C-B114-3140611F9C0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.83", + "matchCriteriaId": "121A07F6-F505-4C47-86BF-9BB6CC7B6C19" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.23", + "matchCriteriaId": "E00814DC-0BA7-431A-9926-80FEB4A96C68" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.11", + "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.8", + "versionEndExcluding": "6.8.2", + "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/07161b2416f740a2cb87faa5566873f401440a61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/276873ae26c8d75b00747c1dadb9561d6ef20581", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/424eba06ed405d557077339edb19ce0ebe39e7c7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6b4a39acafaf0186ed8e97c16e0aa6fca0e52009", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8a8b6a24684bc278036c3f159f7b3a31ad89546a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c402819620a842cbfe39359a3ddfaac9adc8384", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e39a3a14eafcf17f03c037290b78c8f483529028", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/efba65777f98457773c5b65e3135c6132d3b015f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f546cc19f9b82975238d0ba413adc27714750774", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/07161b2416f740a2cb87faa5566873f401440a61", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/276873ae26c8d75b00747c1dadb9561d6ef20581", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/424eba06ed405d557077339edb19ce0ebe39e7c7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6b4a39acafaf0186ed8e97c16e0aa6fca0e52009", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8a8b6a24684bc278036c3f159f7b3a31ad89546a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c402819620a842cbfe39359a3ddfaac9adc8384", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e39a3a14eafcf17f03c037290b78c8f483529028", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/efba65777f98457773c5b65e3135c6132d3b015f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f546cc19f9b82975238d0ba413adc27714750774", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26656.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26656.json index e0d82af5800..4e834bbeaa6 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26656.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26656.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26656", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:42.760", - "lastModified": "2024-11-21T09:02:46.717", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:13:27.847", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,116 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: drm/amdgpu: corrige el error de use-after-free. El error se puede activar enviando un solo amdgpu_gem_userptr_ioctl al controlador DRM AMDGPU en cualquier ASIC con una direcci\u00f3n y tama\u00f1o no v\u00e1lidos. El error fue reportado por Joonkyo Jung . Por ejemplo, el siguiente c\u00f3digo: static void Syzkaller1(int fd) { struct drm_amdgpu_gem_userptr arg; ret int; arg.addr = 0xffffffffffff0000; arg.tama\u00f1o = 0x80000000; /*2 Gb*/ arg.flags = 0x7; ret = drmIoctl(fd, 0xc1186451/*amdgpu_gem_userptr_ioctl*/, &arg); } Debido a que la direcci\u00f3n y el tama\u00f1o no son v\u00e1lidos, hay una falla en amdgpu_hmm_register->mmu_interval_notifier_insert->__mmu_interval_notifier_insert-> check_shl_overflow, pero incluso en la falla de amdgpu_hmm_register todav\u00eda llamamos a amdgpu_hmm_unregister en amdgpu_gem_object_free, lo que provoca el acceso a una direcci\u00f3n incorrecta. La siguiente pila se muestra a continuaci\u00f3n cuando el problema se reproduce cuando Kazan est\u00e1 habilitado: [+0.000014] Nombre del hardware: Nombre del producto del sistema ASUS/ROG STRIX B550-F GAMING (WI-FI), BIOS 1401 03/12/2020 [+0.000009] RIP: 0010:mmu_interval_notifier_remove+0x327/0x340 [ +0.000017] C\u00f3digo: ff ff 49 89 44 24 08 48 b8 00 01 00 00 00 00 ad de 4c 89 f7 49 89 47 40 48 83 c0 22 49 89 47 48 e8 ce d1 2d 01 e9 32 ff ff ff <0f> 0b e9 16 ff ff ff 4c 89 ef e8 fa 14 b3 ff e9 36 ff ff ff e8 80 [ +0.000014] RSP: 0018:ffffc90002657988 EFLAGS: 00010246 [ +0.000 013] RAX: 0000000000000000 RBX: 1ffff920004caf35 RCX: ffffffff8160565b [ +0.000011] RDX: dffffc0000000000 RSI: 00000000000000004 RDI: ffff8881a9f78260 [ +0.000010] RBP: ffffc90002 657a70 R08: 0000000000000001 R09: fffff520004caf25 [ +0.000010] R10: 0000000000000003 R11: ffffffff8161d1d6 R12: ffff88810e988c00 [ +0.000010] R1 3 : ffff888126fb5a00 R14: ffff88810e988c0c R15: ffff8881a9f78260 [ +0.000011] FS: 00007ff9ec848540(0000) GS:ffff8883cc880000(0000) knlGS:000000000 0000000 [ +0,000012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ +0,000010] CR2: 000055b3f7e14328 CR3: 00000001b5770000 CR4: 0000000000350ef0 [+0.000010] Seguimiento de llamadas: [+0.000006] [+0.000007] ? show_regs+0x6a/0x80 [+0.000018]? __advertir+0xa5/0x1b0 [ +0.000019] ? mmu_interval_notifier_remove+0x327/0x340 [+0.000018]? report_bug+0x24a/0x290 [+0.000022] ? handle_bug+0x46/0x90 [+0.000015]? exc_invalid_op+0x19/0x50 [+0.000016]? asm_exc_invalid_op+0x1b/0x20 [+0.000017]? kasan_save_stack+0x26/0x50 [+0.000017]? mmu_interval_notifier_remove+0x23b/0x340 [+0.000019]? mmu_interval_notifier_remove+0x327/0x340 [+0.000019]? mmu_interval_notifier_remove+0x23b/0x340 [+0.000020]? __pfx_mmu_interval_notifier_remove+0x10/0x10 [ +0.000017] ? kasan_save_alloc_info+0x1e/0x30 [ +0.000018] ? srso_return_thunk+0x5/0x5f [+0.000014]? __kasan_kmalloc+0xb1/0xc0 [ +0.000018] ? srso_return_thunk+0x5/0x5f [+0.000013]? __kasan_check_read+0x11/0x20 [ +0.000020] amdgpu_hmm_unregister+0x34/0x50 [amdgpu] [ +0.004695] amdgpu_gem_object_free+0x66/0xa0 [amdgpu] [ +0.004534] ? __pfx_amdgpu_gem_object_free+0x10/0x10 [amdgpu] [ +0.004291] ? do_syscall_64+0x5f/0xe0 [+0.000023]? srso_return_thunk+0x5/0x5f [ +0.000017] drm_gem_object_free+0x3b/0x50 [drm] [ +0.000489] amdgpu_gem_userptr_ioctl+0x306/0x500 [amdgpu] [ +0.004295] ? __pfx_amdgpu_gem_userptr_ioctl+0x10/0x10 [amdgpu] [ +0.004270] ? srso_return_thunk+0x5/0x5f [+0.000014]? __this_cpu_preempt_check+0x13/0x20 [ +0.000015] ? srso_return_thunk+0x5/0x5f [+0.000013]? sysvec_apic_timer_interrupt+0x57/0xc0 [+0.000020]? srso_return_thunk+0x5/0x5f [+0.000014]? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [+0.000022]? drm_ioctl_kernel+0x17b/0x1f0 [drm] [ +0.000496] ? __pfx_amdgpu_gem_userptr_ioctl+0x10/0x10 [amdgpu] [ +0.004272] ? drm_ioctl_kernel+0x190/0x1f0 [drm] [ +0.000492] drm_ioctl_kernel+0x140/0x1f0 [drm] [ +0.000497] ? __pfx_amdgpu_gem_userptr_ioctl+0x10/0x10 [amdgpu] [ +0.004297] ? __pfx_drm_ioctl_kernel+0x10/0x10 [d ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.9", + "matchCriteriaId": "18FE1EAE-C36C-49FC-A5E0-0A661CDC561E" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/22207fd5c80177b860279653d017474b2812af5e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22f665ecfd1225afa1309ace623157d12bb9bb0c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/af054a5fb24a144f99895afce9519d709891894c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e87e08c94c9541b4e18c4c13f2f605935f512605", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22207fd5c80177b860279653d017474b2812af5e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22f665ecfd1225afa1309ace623157d12bb9bb0c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/af054a5fb24a144f99895afce9519d709891894c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e87e08c94c9541b4e18c4c13f2f605935f512605", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26659.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26659.json index ad9c5180bed..453659f069f 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26659.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26659.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26659", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:42.980", - "lastModified": "2024-11-21T09:02:47.073", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:13:19.260", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,59 +15,204 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: xhci: maneja correctamente los eventos isoc Babble y Buffer Overrun xHCI 4.9 proh\u00edbe expl\u00edcitamente suponer que xHC ha liberado su propiedad de un TD multi-TRB cuando informa un error en uno de los primeros TRB. Sin embargo, el conductor hace tal suposici\u00f3n y libera el TD, permitiendo que los TRB restantes sean liberados o sobrescritos por nuevos TD. El xHC tambi\u00e9n debe informar la finalizaci\u00f3n del TRB final debido a que nosotros establecimos la bandera del COI, independientemente de los errores anteriores. Este evento no se puede reconocer si el TD ya se liber\u00f3 anteriormente, lo que genera el mensaje de error \"Evento de transferencia TRB DMA ptr no forma parte del TD actual\". Solucione este problema reutilizando la l\u00f3gica para procesar errores de transacci\u00f3n isoc. Esto tambi\u00e9n maneja los hosts que no informan la finalizaci\u00f3n final. Se corrigi\u00f3 el informe de duraci\u00f3n de la transferencia sobre errores de Babble. Pueden deberse a un mal funcionamiento del dispositivo, no hay garant\u00eda de que se haya llenado el b\u00fafer." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.213", + "matchCriteriaId": "399AEFF4-C09A-4528-9E27-F0E13AF7CC8B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.152", + "matchCriteriaId": "DBBE9241-559E-479A-895A-02186BA03EBF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.82", + "matchCriteriaId": "933AC628-7DAD-4B2D-82E3-3B7B331B1C09" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2aa7bcfdbb46241c701811bbc0d64d7884e3346c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e3ec80ea7ba58bbb210e83b5a0afefee7c171d3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/418456c0ce56209610523f21734c5612ee634134", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/696e4112e5c1ee61996198f0ebb6ca3fab55166e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7c4650ded49e5b88929ecbbb631efb8b0838e811", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f5e7ffa9269a448a720e21f1ed1384d118298c97", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2aa7bcfdbb46241c701811bbc0d64d7884e3346c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e3ec80ea7ba58bbb210e83b5a0afefee7c171d3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/418456c0ce56209610523f21734c5612ee634134", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/696e4112e5c1ee61996198f0ebb6ca3fab55166e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7c4650ded49e5b88929ecbbb631efb8b0838e811", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f5e7ffa9269a448a720e21f1ed1384d118298c97", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26664.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26664.json index c077933b234..3a096d28842 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26664.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26664.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26664", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:43.360", - "lastModified": "2024-11-21T09:02:47.807", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:13:10.637", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,252 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: hwmon: (coretemp) Arreglar el acceso a memoria fuera de los l\u00edmites Arreglar un error que pdata->cpu_map[] est\u00e1 configurado antes de la verificaci\u00f3n de los l\u00edmites. El problema podr\u00eda surgir en sistemas con m\u00e1s de 128 n\u00facleos por paquete." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.264", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "663AF574-7092-4B35-986F-6C84F0225EE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.221", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "F54AF44E-03DF-447B-A146-CD25DA1E2643" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.152", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "C403F3C6-9608-4A2A-B718-EF9083B9E76F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.78", + "matchCriteriaId": "5A5D377D-58D4-4060-93EF-0F3FC16CB596" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26667.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26667.json index 839fac25922..4647d2d5385 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26667.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26667.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26667", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:43.563", - "lastModified": "2024-11-21T09:02:48.243", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:04:31.197", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,146 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/dpu: check for valid hw_pp en dpu_encoder_helper_phys_cleanup. El commit 8b45a26f2ba9 (\"drm/msm/dpu: reserve bloques cdm para reescritura en caso de salida YUV\") introdujo una coincidencia advertencia sobre otro bloque condicional en dpu_encoder_helper_phys_cleanup() que hab\u00eda asumido que hw_pp siempre ser\u00e1 v\u00e1lido, lo que puede no ser necesariamente cierto. Arreglemos el otro bloque condicional asegur\u00e1ndonos de que hw_pp sea v\u00e1lido antes de eliminar la referencia a \u00e9l. Remiendo: https://patchwork.freedesktop.org/patch/574878/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-459" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.1.78", + "matchCriteriaId": "9A366E50-537F-4E13-AF0E-7AF73FBA2BA7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/79592a6e7bdc1d05460c95f891f5e5263a107af8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f3d03c48b1eb6bc45ab20ca98b8b11be25f9f52", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eb4f56f3ff5799ca754ae6d811803a63fe25a4a2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fb8bfc6ea3cd8c5ac3d35711d064e2f6646aec17", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79592a6e7bdc1d05460c95f891f5e5263a107af8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f3d03c48b1eb6bc45ab20ca98b8b11be25f9f52", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eb4f56f3ff5799ca754ae6d811803a63fe25a4a2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fb8bfc6ea3cd8c5ac3d35711d064e2f6646aec17", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26668.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26668.json index cb53f34d20b..97113354e2d 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26668.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26668.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26668", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:43.627", - "lastModified": "2024-11-21T09:02:48.360", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:04:22.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,157 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: netfilter: nft_limit: rechazar configuraciones que causan desbordamiento de enteros Rechazar configuraciones falsas donde el contador de token interno se ajusta. Esto s\u00f3lo ocurre con solicitudes muy grandes, como 17 gbytes/s. Es mejor rechazar esto en lugar de tener un l\u00edmite de tasa incorrecto." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.3", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "B44D10E3-1787-4F5C-8A2F-25F5F13A8415" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.76", + "matchCriteriaId": "32F0FEB3-5FE1-4400-A56D-886F09BE872E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.15", + "matchCriteriaId": "87C718CB-AE3D-4B07-B4D9-BFF64183C468" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/00c2c29aa36d1d1827c51a3720e9f893a22c7c6a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79d4efd75e7dbecd855a3b8a63e65f7265f466e1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9882495d02ecc490604f747437a40626dc9160d0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bc6e242bb74e2ae616bfd2b250682b738e781c9b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9d9eb9c53d37cdebbad56b91e40baf42d5a97aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/00c2c29aa36d1d1827c51a3720e9f893a22c7c6a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79d4efd75e7dbecd855a3b8a63e65f7265f466e1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9882495d02ecc490604f747437a40626dc9160d0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bc6e242bb74e2ae616bfd2b250682b738e781c9b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9d9eb9c53d37cdebbad56b91e40baf42d5a97aa", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26669.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26669.json index e63910ef99f..b1fce9cf176 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26669.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26669.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26669", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:43.697", - "lastModified": "2024-11-21T09:02:48.477", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:04:10.660", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,115 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/sched: flower: descarga de plantilla de cadena fija Cuando se elimina una qdisc de un dispositivo de red, la pila indica al controlador subyacente que elimine su devoluci\u00f3n de llamada de descarga de flujo del bloque de filtro asociado mediante el comando Comando 'FLOW_BLOCK_UNBIND'. Luego, la pila contin\u00faa reproduciendo la eliminaci\u00f3n de los filtros en el bloque para este controlador iterando sobre las cadenas en el bloque e invocando la operaci\u00f3n de \"redescarga\" del clasificador que se est\u00e1 utilizando. A su vez, el clasificador en su operaci\u00f3n de 'redescarga' prepara y emite un comando 'FLOW_CLS_DESTROY' para cada filtro. Sin embargo, la pila no hace lo mismo con las plantillas de cadena y el controlador subyacente nunca recibe un comando 'FLOW_CLS_TMPLT_DESTROY' cuando se elimina una qdisc. Esto da como resultado una p\u00e9rdida de memoria [1] que se puede reproducir usando [2]. Para solucionarlo, introduzca una operaci\u00f3n 'tmplt_reoffload' y haga que la pila la invoque con los argumentos apropiados como parte de la reproducci\u00f3n. Implemente la operaci\u00f3n en el \u00fanico clasificador que admite plantillas de cadena (flor) emitiendo el comando 'FLOW_CLS_TMPLT_{CREATE,DESTROY}' en funci\u00f3n de si una devoluci\u00f3n de llamada de descarga de flujo est\u00e1 vinculada a un bloque de filtro o no est\u00e1 vinculada a uno. Por lo que puedo decir, el problema ocurre desde el commit que reorden\u00f3 tcf_block_offload_unbind() antes de tcf_block_flush_all_chains() en __tcf_block_put(). El orden no se puede invertir ya que se espera que el bloque del filtro se libere despu\u00e9s de lavar todas las cadenas. [1] objeto sin referencia 0xffff888107e28800 (tama\u00f1o 2048): comm \"tc\", pid 1079, jiffies 4294958525 (edad 3074.287s) volcado hexadecimal (primeros 32 bytes): b1 a6 7c 11 81 88 ff ff e0 5b b3 10 81 88 ff f ..|......[...... 01 00 00 00 00 00 00 00 e0 aa b0 84 ff ff ff ff ................ retroceso: [] __kmem_cache_alloc_node+0x1e8/0x320 [] __kmalloc+0x4e/0x90 [] mlxsw_sp_acl_ruleset_get+0x34d/0x7a0 [] mlxsw_sp_flower_tmplt_create+0x145/0x180 [] mlxsw_sp_flow_block_cb+0x1ea/0x280 [] tc_setup_cb_call+0x183/0x340 [] fl_tmplt_create+0x3da/0x4c0 [] tc_ctl_chain+0xa15/0x1170 [] rtnetlink_rcv_msg+0x3cc/0xed0 [] netlink_rcv_skb+0x170/0x440 [] netlink_unicast+0x540/0x820 [] netlink_sendmsg+0x8d8/0xda0 [] ____sys_sendmsg+0x30f/0xa80 [] ___sys_ enviarmsg+0x13a/0x1e0 [] __sys_sendmsg+0x11c/0x1f0 [] do_syscall_64+0x40/0xe0 objeto sin referencia 0xffff88816d2c0400 (tama\u00f1o 1024): comm \"tc\", pid 1079, santiam\u00e9n 4294958525 (edad 3074.287s) volcado hexadecimal (primeros 32 bytes): 40 00 00 00 00 00 00 00 57 f6 38 be 00 00 00 00 @.......W.8..... 10 04 2c 6d 81 88 ff ff 10 04 2c 6d 81 88 ff ff ..,m......, m.... retroceso: [] __kmem_cache_alloc_node+0x1e8/0x320 [] __kmalloc_node+0x51/0x90 [] kvmalloc_node+0xa6/0x1f0 [] bucket_table_alloc.isra.0+0x83/ 0x460 [] rhashtable_init+0x43b/0x7c0 [] mlxsw_sp_acl_ruleset_get+0x428/0x7a0 [] mlxsw_sp_flower_tmplt_create+0x145/0x180 [] mlxsw_sp_flow_block_cb+0x1ea/0x280 [] tc_setup_cb_call+0x183/ 0x340 [] fl_tmplt_create+0x3da/0x4c0 [] tc_ctl_chain+0xa15/0x1170 [] rtnetlink_rcv_msg+0x3cc/0xed0 [] netlink_rcv_skb+0x170/0x440 [] netlink_unicast+0x540/ 0x820 [] netlink_sendmsg+0x8d8/0xda0 [] ____sys_sendmsg+0x30f/0xa80 [2] # ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.1", + "versionEndExcluding": "6.6.15", + "matchCriteriaId": "13124899-DFE8-443A-B42E-08D902793E4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/32f2a0afa95fae0d1ceec2ff06e0e816939964b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ed46144cff3598a5cf79955630e795ff9af5b97", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c04709b2cc99ae31c346f79f0211752d7b74df01", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/32f2a0afa95fae0d1ceec2ff06e0e816939964b8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ed46144cff3598a5cf79955630e795ff9af5b97", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c04709b2cc99ae31c346f79f0211752d7b74df01", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26670.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26670.json index c8358e6614f..c71ba0f2e7d 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26670.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26670.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26670", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:43.760", - "lastModified": "2024-11-21T09:02:48.597", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:03:58.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,110 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64: entrada: arreglar ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD Actualmente, la soluci\u00f3n alternativa ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD no es del todo correcta, ya que se supone que debe aplicarse despu\u00e9s del \u00faltimo acceso expl\u00edcito a la memoria, pero va seguida inmediatamente por un LDR. La soluci\u00f3n alternativa ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD se utiliza para manejar las erratas Cortex-A520 2966298 y Cortex-A510 erratas 3117295, que se describen en: * https://developer.arm.com/documentation/SDEN2444153/0600/?lang=en * https:// desarrollador.arm.com/documentation/SDEN1873361/1600/?lang=en En ambos casos, la soluci\u00f3n se describe como: | Si el aislamiento de la tabla de p\u00e1ginas est\u00e1 deshabilitado, la l\u00f3gica de cambio de contexto en | El kernel se puede actualizar para ejecutar la siguiente secuencia en los afectados | n\u00facleos antes de salir a EL0 y despu\u00e9s de todos los accesos expl\u00edcitos a la memoria: | | 1. Un TLBI que no se puede compartir en cualquier contexto y/o direcci\u00f3n, incluido | contextos o direcciones no utilizados, como `TLBI VALE1 Xzr`. | | 2. Un OSD NSH para garantizar la finalizaci\u00f3n del TLBI. La parte importante es que el TLBI+DSB debe colocarse \"despu\u00e9s de todos los accesos expl\u00edcitos a la memoria\". Desafortunadamente, tal como se implement\u00f3, el TLBI+DSB es seguido inmediatamente por un LDR, como tenemos: | Alternative_if ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD | tlbi vale1, xzr | dsb nsh | alternativa_else_nop_endif | alternativa_si_no ARM64_UNMAP_KERNEL_AT_EL0 | ldr lr, [sp, #S_LR] | agregar sp, sp, #PT_REGS_SIZE // restaurar sp | eremita | alternativa_else_nop_endif | | [... Ruta de retorno de excepci\u00f3n KPTI...] Este parche soluciona este problema reelaborando la l\u00f3gica para colocar TLBI+DSB inmediatamente antes de ERET, despu\u00e9s de todos los accesos expl\u00edcitos a la memoria. El ERET se encuentra actualmente en un bloque alternativo separado y las alternativas no se pueden anidar. Para tener en cuenta esto, el bloque alternativo para ARM64_UNMAP_KERNEL_AT_EL0 se reemplaza con una \u00fanica rama alternativa para omitir la l\u00f3gica KPTI, siendo la nueva forma de la l\u00f3gica: | Alternative_insn \"b .L_skip_tramp_exit_\\@\", nop, ARM64_UNMAP_KERNEL_AT_EL0 | [... Ruta de retorno de excepci\u00f3n KPTI...] | .L_skip_tramp_exit_\\@: | | ldr lr, [sp, #S_LR] | agregar sp, sp, #PT_REGS_SIZE // restaurar sp | | Alternative_if ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD | tlbi vale1, xzr | dsb nsh | alternativa_else_nop_endif | eret La nueva estructura significa que la soluci\u00f3n alternativa s\u00f3lo se aplica cuando KPTI no est\u00e1 en uso; esto est\u00e1 bien, como se indica en las implicaciones documentadas de la fe de erratas: | El aislamiento de la tabla de paginaci\u00f3n entre EL0 y los EL de nivel superior evita que | que ocurra el problema. ... y seg\u00fan la descripci\u00f3n de la soluci\u00f3n citada anteriormente, la soluci\u00f3n s\u00f3lo es necesaria \"si el aislamiento de la tabla de p\u00e1ginas est\u00e1 deshabilitado\"." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.15", + "matchCriteriaId": "EB070897-9C4B-4820-AE94-31318C9F5D76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.3", + "matchCriteriaId": "58FD5308-148A-40D3-B36A-0CA6B434A8BF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/58eb5c07f41704464b9acc09ab0707b6769db6c0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/832dd634bd1b4e3bbe9f10b9c9ba5db6f6f2b97f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/baa0aaac16432019651e0d60c41cd34a0c3c3477", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58eb5c07f41704464b9acc09ab0707b6769db6c0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/832dd634bd1b4e3bbe9f10b9c9ba5db6f6f2b97f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/baa0aaac16432019651e0d60c41cd34a0c3c3477", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26671.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26671.json index a08c513207f..497bcc1514e 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26671.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26671.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26671", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:43.830", - "lastModified": "2024-11-21T09:02:48.720", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:03:48.280", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,236 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: blk-mq: corrige el bloqueo de IO de la carrera de activaci\u00f3n del mapa de bits En blk_mq_mark_tag_wait(), __add_wait_queue() se puede reordenar con el siguiente blk_mq_get_driver_tag() en caso de que se produzca un error en la etiqueta del controlador. Luego, en __sbitmap_queue_wake_up(), waitqueue_active() puede no observar al camarero agregado en blk_mq_mark_tag_wait() y no despertar nada, mientras tanto, blk_mq_mark_tag_wait() no puede obtener la etiqueta del controlador correctamente. Este problema se puede reproducir ejecutando la siguiente prueba en bucle, y se puede observar un bloqueo de fio en < 30 minutos cuando lo ejecuto en mi m\u00e1quina virtual de prueba en una computadora port\u00e1til. modprobe -r scsi_debug modprobe scsi_debug delay=0 dev_size_mb=4096 max_queue=1 host_max_queue=1 submit_queues=4 dev=`ls -d /sys/bus/pseudo/drivers/scsi_debug/adapter*/host*/target*/*/block /* | cabeza -1 | xargs basename` fio --filename=/dev/\"$dev\" --direct=1 --rw=randrw --bs=4k --io Depth=1 \\ --runtime=100 --numjobs=40 --time_based - -name=test \\ --ioengine=libaio Solucione el problema agregando una barrera expl\u00edcita en blk_mq_mark_tag_wait(), lo cual est\u00e1 bien en caso de quedarse sin etiqueta." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "4B4E1A83-9957-4265-94C0-516374C8CCFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.77", + "matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "69D6757C-7F67-4658-A99A-EA157BABCF3F" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1d9c777d3e70bdc57dddf7a14a80059d65919e56", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5266caaf5660529e3da53004b8b7174cab6374ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6d8b01624a2540336a32be91f25187a433af53a0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7610ba1319253225a9ba8a9d28d472fc883b4e2f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/89e0e66682e1538aeeaa3109503473663cd24c8b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9525b38180e2753f0daa1a522b7767a2aa969676", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ecd7744a1446eb02ccc63e493e2eb6ede4ef1e10", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1bc0d8163f8ee84a8d5affdf624cfad657df1d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1d9c777d3e70bdc57dddf7a14a80059d65919e56", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5266caaf5660529e3da53004b8b7174cab6374ed", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6d8b01624a2540336a32be91f25187a433af53a0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7610ba1319253225a9ba8a9d28d472fc883b4e2f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/89e0e66682e1538aeeaa3109503473663cd24c8b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9525b38180e2753f0daa1a522b7767a2aa969676", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ecd7744a1446eb02ccc63e493e2eb6ede4ef1e10", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1bc0d8163f8ee84a8d5affdf624cfad657df1d2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26673.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26673.json index 18cd5800b17..71df5e72a99 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26673.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26673.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26673", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:43.967", - "lastModified": "2024-11-21T09:02:49.017", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:43:02.517", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,67 +15,226 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: netfilter: nft_ct: desinfecta el n\u00famero de protocolo de capa 3 y 4 en expectativas personalizadas - No permitir familias que no sean NFPROTO_{IPV4,IPV6,INET}. - No permitir el protocolo de capa 4 sin puertos, ya que el puerto de destino es un atributo obligatorio para este objeto." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "493D0365-C952-40A6-A77B-80FAF041BFA4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.77", + "matchCriteriaId": "0FA28946-970D-4F4D-B759-4E77B28809B5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.16", + "matchCriteriaId": "A5007D6A-4B58-423A-8A3A-A1A656A263C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.4", + "matchCriteriaId": "848BC44C-9D25-4557-A50A-4B8BF310FA78" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0f501dae16b7099e69ee9b0d5c70b8f40fd30e98", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/38cc1605338d99205a263707f4dde76408d3e0e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65ee90efc928410c6f73b3d2e0afdd762652c09d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8059918a1377f2f1fff06af4f5a4ed3d5acd6bc4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b775ced05489f4b77a35fe203e9aeb22f428e38f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cfe3550ea5df292c9e2d608e8c4560032391847e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f549f340c91f08b938d60266e792ff7748dae483", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0f501dae16b7099e69ee9b0d5c70b8f40fd30e98", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/38cc1605338d99205a263707f4dde76408d3e0e8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65ee90efc928410c6f73b3d2e0afdd762652c09d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8059918a1377f2f1fff06af4f5a4ed3d5acd6bc4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b775ced05489f4b77a35fe203e9aeb22f428e38f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cfe3550ea5df292c9e2d608e8c4560032391847e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f549f340c91f08b938d60266e792ff7748dae483", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26674.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26674.json index d1211a1f150..e2624a6256b 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26674.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26674.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26674", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.033", - "lastModified": "2024-11-21T09:02:49.137", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:42:54.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,125 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: x86/lib: vuelva a _ASM_EXTABLE_UA() para reparaciones de {get,put}_user() Durante la prueba de inyecci\u00f3n de errores de memoria en kernels >= v6.4, el kernel entra en p\u00e1nico como se muestra a continuaci\u00f3n. Sin embargo, este problema no se pudo reproducir en kernels <= v6.3. mce: [Error de hardware]: CPU 296: Excepci\u00f3n de verificaci\u00f3n de la m\u00e1quina: f Banco 1: bd80000000100134 mce: [Error de hardware]: RIP 10: {__get_user_nocheck_4+0x6/0x20} mce: [Error de hardware]: TSC 411a93533ed ADDR 346a87300 40 MISC 86 mce: [Error de hardware]: PROCESADOR 0:a06d0 HORA 1706000767 SOCKET 1 APIC 211 microc\u00f3digo 80001490 mce: [Error de hardware]: Ejecute lo anterior a trav\u00e9s de 'mcelog --ascii' mce: [Error de hardware]: Verificaci\u00f3n de la m\u00e1quina: Carga de datos en un \u00e1rea irrecuperable del kernel P\u00e1nico del kernel - no se sincroniza: verificaci\u00f3n fatal de la m\u00e1quina local El c\u00f3digo MCA se puede recuperar de un #MC en el kernel si el tipo de reparaci\u00f3n es EX_TYPE_UACCESS, lo que indica expl\u00edcitamente que el kernel est\u00e1 intentando acceder a la memoria del espacio de usuario. Sin embargo, si el tipo de reparaci\u00f3n es EX_TYPE_DEFAULT, lo \u00fanico que se genera para un #MC en el kernel es p\u00e1nico. ex_handler_uaccess() advertir\u00eda si los usuarios proporcionaban direcciones no can\u00f3nicas (con el bit 63 claro) a {get, put}_user(), lo cual era inesperado. Por lo tanto, el commit b19b74bc99b1 (\"x86/mm: Reelaborar la verificaci\u00f3n del rango de direcciones en get_user() y put_user()\") reemplaz\u00f3 _ASM_EXTABLE_UA() con _ASM_EXTABLE() para las correcciones de {get, put}_user(). Sin embargo, el nuevo tipo de reparaci\u00f3n EX_TYPE_DEFAULT provoca p\u00e1nico. El commit 6014bc27561f (\"x86-64: hacer que access_ok() sea independiente de LAM\") agreg\u00f3 la verificaci\u00f3n gp_fault_address_ok() justo antes de WARN_ONCE() en ex_handler_uaccess() para no advertir sobre direcciones de usuarios no can\u00f3nicas debido a LAM. Una vez implementado esto, vuelva a _ASM_EXTABLE_UA() para corregir excepciones de {get,put}_user() para poder manejar correctamente los MCE en el kernel nuevamente. [pb: mensaje de commit. ]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "0407B974-1873-4EE4-B984-9520B51F7249" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2aed1b6c33afd8599d01c6532bbecb829480a674", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2da241c5ed78d0978228a1150735539fe1a60eca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8eed4e00a370b37b4e5985ed983dccedd555ea9d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2aed1b6c33afd8599d01c6532bbecb829480a674", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2da241c5ed78d0978228a1150735539fe1a60eca", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8eed4e00a370b37b4e5985ed983dccedd555ea9d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26675.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26675.json index 3f6f4a5bc33..bd81b210b36 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26675.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26675.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26675", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.100", - "lastModified": "2024-11-21T09:02:49.250", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:42:44.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,259 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ppp_async: limitar MRU a 64K syzbot activ\u00f3 una advertencia [1] en __alloc_pages(): WARN_ON_ONCE_GFP(order > MAX_PAGE_ORDER, gfp) Willem solucion\u00f3 un problema similar en el commit c0a2a1b0d631 (\"ppp: limite MRU a 64K\") Adopte la misma verificaci\u00f3n de cordura para ppp_async_ioctl(PPPIOCSMRU) [1]: ADVERTENCIA: CPU: 1 PID: 11 en mm/page_alloc.c:4543 __alloc_pages+0x308/0x698 mm/page_alloc.c:4543 M\u00f3dulos vinculados en: CPU: 1 PID: 11 Comm: kworker/u4:0 No contaminado 6.8.0-rc2-syzkaller-g41bccc98fb79 #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 17/11/2023 Cola de trabajo: events_unbound flux_to_ldisc pstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __alloc_pages+0x308/0x698 mm/page_alloc.c:4543 lr : __alloc_pages+0xc8/0x698 mm/page_alloc.c:4537 sp: ffff800093967580 x29: ffff800093967660 x28: ffff8000939675a0 x27: dfff800000000000 x26: ffff70001272ceb4 x25: 0000000000000000 x24: ffff8000 939675c0 x23: 0000000000000000 x22: 0000000000060820 x21: 1ffff0001272ceb8 x20: ffff8000939675e0 x19: 0000000000000010 x18: ffff8000939671 20 x17: ffff800083bded5c x16: ffff80008ac97500 x15: 00000000000000005 x14: 1ffff0001272cebc x13: 0000000000000000 x12: 0000000000000000 x11: ffff70001272cec1 x10: 1ffff0001272cec0 x9: 0000000000000001 x8: ffff800091c 91000 x7: 0000000000000000 x6: 000000000000003f x5: 00000000ffffffff x4: 0000000000000000 x3: 00000000000000020 x2: 0000000000000008 x1: 0000000000000000 x0: ffff8000939675e0 Rastreo de llamadas: __alloc_pages+0x308/ 0x698 mm/page_alloc.c:4543 __alloc_pages_node include/linux/gfp.h:238 [en l\u00ednea] alloc_pages_node include/linux/gfp.h:261 [en l\u00ednea] __kmalloc_large_node+0xbc/0x1fc mm/slub.c:3926 __do_kmalloc_node mm/slub .c:3969 [en l\u00ednea] __kmalloc_node_track_caller+0x418/0x620 mm/slub.c:4001 kmalloc_reserve+0x17c/0x23c net/core/skbuff.c:590 __alloc_skb+0x1c8/0x3d8 net/core/skbuff.c:651 __netdev_alloc_skb+0x b8 /0x3e8 net/core/skbuff.c:715 netdev_alloc_skb include/linux/skbuff.h:3235 [en l\u00ednea] dev_alloc_skb include/linux/skbuff.h:3248 [en l\u00ednea] ppp_async_input drivers/net/ppp/ppp_async.c:863 [ en l\u00ednea] ppp_asynctty_receive+0x588/0x186c controladores/net/ppp/ppp_async.c:341 tty_ldisc_receive_buf+0x12c/0x15c controladores/tty/tty_buffer.c:390 tty_port_default_receive_buf+0x74/0xac controladores/tty/tty_port.c:37 recibir_buf controladores /tty /tty_buffer.c:444 [en l\u00ednea] Flush_to_ldisc+0x284/0x6e4 controladores/tty/tty_buffer.c:494 Process_one_work+0x694/0x1204 kernel/workqueue.c:2633 Process_scheduled_works kernel/workqueue.c:2706 [en l\u00ednea] trabajador_thread+0x938/ 0xef4 kernel/workqueue.c:2787 kthread+0x288/0x310 kernel/kthread.c:388 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.12", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "9F7D87E5-6751-4F81-9988-9AD4C1201206" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.78", + "matchCriteriaId": "26190115-BC0C-4106-9408-E7928FE5DA62" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/210d938f963dddc543b07e66a79b7d8d4bd00bd8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e2c4846b2507f6dfc9bea72b7567c2693a82a16", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4fdb14ba89faff6e6969a4dffdc8e54235d6e5ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/56fae81633ccee307cfcb032f706bf1863a56982", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58fbe665b097bf7b3144da7e7b91fb27aa8d0ae3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e5ef49670766c9742ffcd9cead7cdb018268719", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b06e067e93fa4b98acfd3a9f38a398ab91bbc58b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb88cb53badb8aeb3955ad6ce80b07b598e310b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/210d938f963dddc543b07e66a79b7d8d4bd00bd8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4e2c4846b2507f6dfc9bea72b7567c2693a82a16", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4fdb14ba89faff6e6969a4dffdc8e54235d6e5ed", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/56fae81633ccee307cfcb032f706bf1863a56982", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58fbe665b097bf7b3144da7e7b91fb27aa8d0ae3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e5ef49670766c9742ffcd9cead7cdb018268719", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b06e067e93fa4b98acfd3a9f38a398ab91bbc58b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb88cb53badb8aeb3955ad6ce80b07b598e310b8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26677.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26677.json index bf28188a3c8..f9c09eb26d1 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26677.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26677.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26677", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.237", - "lastModified": "2024-11-21T09:02:49.587", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:42:33.780", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,125 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: rxrpc: corrige los ACK retrasados para no establecer el n\u00famero de serie de referencia. Se corrige la construcci\u00f3n de los ACK retrasados para no establecer el n\u00famero de serie de referencia, ya que no se pueden usar como referencia RTT." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.22", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "DFF732C1-1A9E-488E-B8A1-3F297A51CCFF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/200cb50b9e154434470c8969d32474d38475acc2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/63719f490e6a89896e9a463d2b45e8203eab23ae", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e7870cf13d20f56bfc19f9c3e89707c69cf104ef", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26678.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26678.json index f1fc4ff42e6..9908c3755d0 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26678.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26678.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26678", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.307", - "lastModified": "2024-11-21T09:02:49.700", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:42:26.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,132 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/efistub: use archivo 1:1: mapeo de memoria para PE/COFF secci\u00f3n .compat La secci\u00f3n .compat es una secci\u00f3n PE ficticia que contiene la direcci\u00f3n del punto de entrada de 32 bits de la imagen del kernel de 64 bits si se puede iniciar desde firmware de 32 bits (es decir, CONFIG_EFI_MIXED=y) Esta secci\u00f3n tiene solo 8 bytes de tama\u00f1o y solo se hace referencia a ella desde el cargador, por lo que se coloca al final de la memoria. vista de la imagen, para evitar la necesidad de rellenarla a 4k, lo cual es necesario para las secciones que aparecen en el medio de la imagen. Desafortunadamente, esto viola la especificaci\u00f3n PE/COFF, e incluso si la mayor\u00eda de los cargadores EFI funcionan correctamente (incluida la implementaci\u00f3n de referencia de Tianocore), existen cargadores PE que rechazan dichas im\u00e1genes, bas\u00e1ndose en que tanto las vistas de archivo como de memoria del contenido del archivo deben ser descritos por los encabezados de las secciones de manera mon\u00f3tonamente creciente sin dejar espacios en blanco. As\u00ed que reorganice las secciones para evitar este problema. Esto da como resultado una ligera sobrecarga de relleno (< 4k) que se puede evitar si se desea deshabilitando CONFIG_EFI_MIXED (que solo es necesario en casos excepcionales en estos d\u00edas)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a962f2fbaa976af9eed21d0306370cded485787", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1ad55cecf22f05f1c884adf63cc09d3c3e609ebf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4adeeff8c12321cd453412a659c3c0eeb9bb2397", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d327e961573fc335af0ae8a160302205327e1f4e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0a962f2fbaa976af9eed21d0306370cded485787", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1ad55cecf22f05f1c884adf63cc09d3c3e609ebf", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4adeeff8c12321cd453412a659c3c0eeb9bb2397", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d327e961573fc335af0ae8a160302205327e1f4e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26679.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26679.json index 6077bc2e213..ae6d19238cb 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26679.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26679.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26679", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.400", - "lastModified": "2024-11-21T09:02:49.820", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:42:17.600", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,259 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: inet: lee sk->sk_family una vez en inet_recv_error() se llama a inet_recv_error() sin mantener el bloqueo del socket. El socket IPv6 podr\u00eda mutar a IPv4 con la opci\u00f3n de socket IPV6_ADDRFORM y generar una advertencia de KCSAN." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.18", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "EC92BBA6-F902-49DB-8E8D-3381C8E499EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.78", + "matchCriteriaId": "26190115-BC0C-4106-9408-E7928FE5DA62" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/307fa8a75ab7423fa5c73573ec3d192de5027830", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3266e638ba5cc1165f5e6989eb8c0720f1cc4b41", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a5e31bdd3c1702b520506d9cf8c41085f75c7f2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/54538752216bf89ee88d47ad07802063a498c299", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5993f121fbc01dc2d734f0ff2628009b258fb1dd", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/88081ba415224cf413101def4343d660f56d082b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/caa064c3c2394d03e289ebd6b0be5102eb8a5b40", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eef00a82c568944f113f2de738156ac591bbd5cd", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26680.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26680.json index dc289f2aab1..0bbaa95da8e 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26680.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26680.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26680", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.490", - "lastModified": "2024-11-21T09:02:49.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:42:06.147", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,146 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: atlantic: corrige el mapeo DMA para el anillo PTP hwts. La funci\u00f3n aq_ring_hwts_rx_alloc() asigna bytes AQ_CFG_RXDS_DEF adicionales para el anillo PTP HWTS, pero luego el aq_ring_free() gen\u00e9rico no tiene esto en cuenta. Cree y utilice una funci\u00f3n espec\u00edfica para liberar el anillo HWTS y solucionar este problema. Seguimiento: [215.351607] ------------[ cortar aqu\u00ed ]------------ [ 215.351612] DMA-API: atlantic 0000:4b:00.0: el controlador de dispositivo se libera Memoria DMA con diferente tama\u00f1o [direcci\u00f3n del dispositivo=0x00000000fbdd0000] [tama\u00f1o del mapa=34816 bytes] [tama\u00f1o de desasignaci\u00f3n=32768 bytes] [215.351635] ADVERTENCIA: CPU: 33 PID: 10759 en kernel/dma/debug.c:988 check_unmap+0xa6f/ 0x2360... [215.581176] Seguimiento de llamadas: [215.583632] [215.585745]? show_trace_log_lvl+0x1c4/0x2df [215.590114]? show_trace_log_lvl+0x1c4/0x2df [215.594497]? debug_dma_free_coherent+0x196/0x210 [215.599305]? check_unmap+0xa6f/0x2360 [215.603147]? __advertir+0xca/0x1d0 [215.606391] ? check_unmap+0xa6f/0x2360 [215.610237]? report_bug+0x1ef/0x370 [215.613921]? handle_bug+0x3c/0x70 [215.617423]? exc_invalid_op+0x14/0x50 [215.621269]? asm_exc_invalid_op+0x16/0x20 [215.625480]? check_unmap+0xa6f/0x2360 [215.629331]? mark_lock.part.0+0xca/0xa40 [215.633445] debug_dma_free_coherent+0x196/0x210 [215.638079]? __pfx_debug_dma_free_coherent+0x10/0x10 [215.643242] ? slab_free_freelist_hook+0x11d/0x1d0 [ 215.648060] dma_free_attrs+0x6d/0x130 [ 215.651834] aq_ring_free+0x193/0x290 [atl\u00e1ntico] [ 215.656487] aq_ptp_ring_free+0x67/0x110 [atl\u00e1ntico]... [216.127540] ---[fin de seguimiento 6467e5964dd2640b]- -- [ 216.132160] DMA-API: Asignado en: [ 216.132162] debug_dma_alloc_coherent+0x66/0x2f0 [ 216.132165] dma_alloc_attrs+0xf5/0x1b0 [ 216.132168] aq_ring_hwts_rx_alloc+0x150 /0x1f0 [atl\u00e1ntico] [ 216.132193] aq_ptp_ring_alloc+0x1bb/0x540 [atl\u00e1ntico] [216.132213] aq_nic_init+0x4a1/0x760 [atl\u00e1ntico]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "6.1.78", + "matchCriteriaId": "FBEFF50A-3584-4FBB-A174-912E8023B334" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/004fe5b7f59286a926a45e0cafc7870e9cdddd56", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e7d3b67630dfd8f178c41fa2217aa00e79a5887", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/466ceebe48cbba3f4506f165fca7111f9eb8bb12", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e42e334c645575be5432adee224975d4f536fdb1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/004fe5b7f59286a926a45e0cafc7870e9cdddd56", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e7d3b67630dfd8f178c41fa2217aa00e79a5887", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/466ceebe48cbba3f4506f165fca7111f9eb8bb12", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e42e334c645575be5432adee224975d4f536fdb1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26681.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26681.json index ed0f7f71526..9776d70242c 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26681.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26681.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26681", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.567", - "lastModified": "2024-11-21T09:02:50.057", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:41:54.090", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,146 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netdevsim: evita un posible bucle en nsim_dev_trap_report_work() Muchos informes de syzbot incluyen el siguiente seguimiento [1] Si nsim_dev_trap_report_work() no puede capturar el mutex, deber\u00eda rearmarse al menos un santiam\u00e9n despu\u00e9s . [1] Env\u00edo de NMI desde la CPU 1 a las CPU 0: seguimiento de NMI para la CPU 0 CPU: 0 PID: 32383 Comm: kworker/0:2 Not tainted 6.8.0-rc2-syzkaller-00031-g861c0981648f #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 17/11/2023 Cola de trabajo: eventos nsim_dev_trap_report_work RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:89 [en l\u00ednea] RIP: 0010:memory_is_nonzero mm/kasan/generic.c:104 [ en l\u00ednea] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:129 [en l\u00ednea] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:161 [en l\u00ednea] RIP: 0010:check_region_inline mm/kasan/generic.c:180 [en l\u00ednea] RIP: 0010:kasan_check_range+0x101/0x190 mm/kasan/generic.c:189 C\u00f3digo: 07 49 39 d1 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 21 ed ff ff 83 f0 01 5b 5d 41 5c c3 48 85 d2 74 4f 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 41 80 38 00 74 f2 eb b6 41 bc 08 00 00 00 RSP: 0018:ffffc90012dcf998 EFLAGS: 00000046 RAX: ffffbfff258af1e RBX: ffffbfff258af1f RCX: ffffffff8168eda3 RDX: ffffbfff258af1f RSI: 0000000000000004 RDI: ffffffff92c578f0 RBP: ffffbfff258af1e R08: 00000000000000000 R09: f ffffbfff258af1e R10: ffffffff92c578f3 R11: ffffffff8acbcbc0 R12: 0000000000000002 R13: ffff88806db38400 R14: 1ffff920025b9f42 R15: ffffffff92c578e8 FS: 0000 000000000000(0000) GS: ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c00994e078 CR3: 000000002c250000 CR 4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 00000000000000000 DR6: 00000000ffe0ff0 DR7: 00000 00000000400 Seguimiento de llamadas: < NMI> instrument_atomic_read include/linux/instrumented.h:68 [en l\u00ednea] atomic_read include/linux/atomic/atomic-instrumented.h:32 [en l\u00ednea] queued_spin_is_locked include/asm-generic/qspinlock.h: 57 [en l\u00ednea] debug_spin_unlock kernel/locking/spinlock_debug.c:101 [en l\u00ednea] do_raw_spin_unlock+0x53/0x230 kernel/locking/spinlock_debug.c:141 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:150 [en l\u00ednea] _raw_spin_unlock_irqrestore +0x22/0x70 n\u00facleo /locking/spinlock.c:194 debug_object_activate+0x349/0x540 lib/debugobjects.c:726 debug_work_activate kernel/workqueue.c:578 [en l\u00ednea] insert_work+0x30/0x230 kernel/workqueue.c:1650 __queue_work+0x62e/0x11d0 kernel/ workqueue.c:1802 __queue_delayed_work+0x1bf/0x270 kernel/workqueue.c:1953 queue_delayed_work_on+0x106/0x130 kernel/workqueue.c:1989 queue_delayed_work include/linux/workqueue.h:563 [en l\u00ednea] Schedule_delayed_work include/linux/workqueue.h :677 [en l\u00ednea] nsim_dev_trap_report_work+0x9c0/0xc80 drivers/net/netdevsim/dev.c:842 Process_one_work+0x886/0x15d0 kernel/workqueue.c:2633 Process_scheduled_works kernel/workqueue.c:2706 [en l\u00ednea] work_thread+0x8b9/0x1290 n\u00facleo /workqueue.c:2787 kthread+0x2c6/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-835" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.1.78", + "matchCriteriaId": "12EE926A-E34D-41BE-B857-286F1093510F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0193e0660cc6689c794794b471492923cfd7bfbc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6eecddd9c3c8d6e3a097531cdc6d500335b35e46", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba5e1272142d051dcc57ca1d3225ad8a089f9858", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d91964cdada76740811b7c621239f9c407820dbc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0193e0660cc6689c794794b471492923cfd7bfbc", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6eecddd9c3c8d6e3a097531cdc6d500335b35e46", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba5e1272142d051dcc57ca1d3225ad8a089f9858", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d91964cdada76740811b7c621239f9c407820dbc", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26682.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26682.json index 6333f9bc5a1..2407f01bf29 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26682.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26682.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26682", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.637", - "lastModified": "2024-11-21T09:02:50.173", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:41:17.197", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,104 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: \"wifi: mac80211: improve CSA/ECSA connection refusal\". Como se mencion\u00f3 en el commit anterior, descubrimos r\u00e1pidamente que algunos AP tienen elementos ECSA atascados en su respuesta de sondeo, por lo que no se pueden usar si intentamos conectarnos mientras se realiza CSA, nunca nos conectaremos a dicho AP. Mejore esta situaci\u00f3n verificando m\u00e1s cuidadosamente e ignorando ECSA si cfg80211 ha detectado previamente que el elemento ECSA est\u00e1 atascado en la respuesta de la sonda. Adem\u00e1s, permita conectarse a un AP que est\u00e9 cambiando a un canal que ya est\u00e9 usando, a menos que est\u00e9 usando el modo silencioso. En este caso, es posible que tengamos que ajustar el ancho de banda m\u00e1s adelante. Si en realidad est\u00e1 cambiando de canal, es mejor no intentar conectarse en medio de eso." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/35e2385dbe787936c793d70755a5177d267a40aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ea88bde8e3fefbe4268f6991375dd629895a090a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/35e2385dbe787936c793d70755a5177d267a40aa", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ea88bde8e3fefbe4268f6991375dd629895a090a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26683.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26683.json index cb45dde12a4..21fb33e1df0 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26683.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26683.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26683", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.700", - "lastModified": "2024-11-21T09:02:50.280", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:41:11.497", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,104 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: \"wifi: cfg80211: detect stuck ECSA element in probe resp\". Recientemente agregamos alguna validaci\u00f3n de que no intentamos conectarnos a un AP que se encuentra actualmente en un proceso de cambio de canal, desde entonces es posible que deseemos que el canal est\u00e9 en silencio o que no podamos conectarnos a tiempo para escuchar el cambio en una baliza. Esto estaba en el commit c09c4f31998b (\"wifi: mac80211: no se conecte a un AP mientras est\u00e9 en un proceso CSA\"). Sin embargo, r\u00e1pidamente recibimos un informe de que esto caus\u00f3 nuevas fallas de conexi\u00f3n, y resulta que el AP al que ahora no podemos conectarnos anuncia permanentemente un anuncio de cambio de canal extendido, incluso en silencio. El AP en cuesti\u00f3n era un Asus RT-AC53, con firmware 3.0.0.4.380_10760-g21a5898. Como primer paso, intente detectar que estamos lidiando con una situaci\u00f3n de este tipo, para que mac80211 pueda usarlo m\u00e1s adelante." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/177fbbcb4ed6b306c1626a277fac3fb1c495a4c7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce112c941c2b172afba3e913a90c380647d53975", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/177fbbcb4ed6b306c1626a277fac3fb1c495a4c7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce112c941c2b172afba3e913a90c380647d53975", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26684.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26684.json index 727c987aaf8..b9399d426f7 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26684.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26684.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26684", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-02T07:15:44.770", - "lastModified": "2024-11-21T09:02:50.390", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:41:04.173", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,67 +15,231 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: stmmac: xgmac: corrige el manejo del error de seguridad DPP para canales DMA. El commit 56e58d6c8a56 (\"net: stmmac: Implement Safety Features in XGMAC core\") verifica e informa errores de seguridad, pero deja sin controlar los errores de paridad de ruta de datos para cada canal en DMA, lo que provoca una tormenta de interrupciones. Solucionelo verificando y borrando el registro DMA_DPP_Interrupt_Status." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "E2B90340-A8CC-4956-9F40-F37195011EC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.78", + "matchCriteriaId": "26190115-BC0C-4106-9408-E7928FE5DA62" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.17", + "matchCriteriaId": "73F8C6ED-5A0B-4B25-8FA9-AF916A9C8F0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.5", + "matchCriteriaId": "01925741-2C95-47C1-A7EA-3DC2BB0012D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2fc45a4631ac7837a5c497cb4f7e2115d950fc37", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3b48c9e258c8691c2f093ee07b1ea3764caaa1b2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/46eba193d04f8bd717e525eb4110f3c46c12aec3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6609e98ed82966a1b3168c142aca30f8284a7b89", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e0ff50131e9d1aa507be8e670d38e9300a5f5bf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e42ff0844fe418c7d03a14f9f90e1b91ba119591", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e9837c83befb5b852fa76425dde98a87b737df00", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fc45a4631ac7837a5c497cb4f7e2115d950fc37", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3b48c9e258c8691c2f093ee07b1ea3764caaa1b2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/46eba193d04f8bd717e525eb4110f3c46c12aec3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6609e98ed82966a1b3168c142aca30f8284a7b89", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e0ff50131e9d1aa507be8e670d38e9300a5f5bf", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e42ff0844fe418c7d03a14f9f90e1b91ba119591", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e9837c83befb5b852fa76425dde98a87b737df00", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26686.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26686.json index c0ed4418cd6..68c5e4c337c 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26686.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26686.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26686", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:52.263", - "lastModified": "2024-12-09T13:10:00.537", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:40:11.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fs/proc: do_task_stat: use sig->stats_lock para recopilar las estad\u00edsticas de subprocesos/hijos lock_task_sighand() puede desencadenar un bloqueo completo. Si los subprocesos NR_CPUS llaman a do_task_stat() al mismo tiempo y el proceso tiene NR_THREADS, girar\u00e1 con irqs deshabilitados O(NR_CPUS * NR_THREADS) tiempo. Cambie do_task_stat() para usar sig->stats_lock para recopilar las estad\u00edsticas fuera de ->secci\u00f3n protegida siglock, en el caso probable de que este c\u00f3digo se ejecute sin bloqueo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.82", + "matchCriteriaId": "4CC97550-2BA7-4039-97D5-186B9907FC6D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "7BADF976-3B39-485C-A14E-7B78C859F4A0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/27978243f165b44e342f28f449b91327944ea071", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3820b0fac7732a653bcc6f6ac20c1d72e697f8f6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7601df8031fd67310af891897ef6cc0df4209305", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf4b8c39b9a0bd81c47afc7ef62914a62dd5ec4d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/27978243f165b44e342f28f449b91327944ea071", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7601df8031fd67310af891897ef6cc0df4209305", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf4b8c39b9a0bd81c47afc7ef62914a62dd5ec4d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26687.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26687.json index 699def444ae..4e0bc37382e 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26687.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26687.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26687", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:52.313", - "lastModified": "2024-11-21T09:02:50.820", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:39:03.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,67 +15,215 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: xen/events: cierre evtchn despu\u00e9s de la limpieza del mapeo. Shutdown_pirq y startup_pirq no est\u00e1n tomando irq_mapping_update_lock porque no pueden hacerlo debido a la inversi\u00f3n de bloqueo. Ambos se llaman con el irq_desc->lock en curso. Sin embargo, el orden de bloqueo es primero irq_mapping_update_lock y luego irq_desc->lock. Esto abre m\u00faltiples ejecuci\u00f3ns: - Shutdown_pirq puede ser interrumpido por una funci\u00f3n que asigna un canal de evento: CPU0 CPU1 Shutdown_pirq { xen_evtchn_close(e) __startup_pirq { EVTCHNOP_bind_pirq -> devuelve el evtchn e set_evtchn_to_irq(e, irq) reci\u00e9n liberado} xen_irq_info_cleanup() { set_evtchn_to_irq( e, -1) } } Supongamos que aqu\u00ed el canal de eventos e se refiere aqu\u00ed al mismo n\u00famero de canal de eventos. Despu\u00e9s de esta ejecuci\u00f3n, el mapeo evtchn_to_irq para e no es v\u00e1lido (-1). - __startup_pirq compite con __unbind_from_irq de manera similar. Debido a que __startup_pirq no toma irq_mapping_update_lock, puede tomar el evtchn que __unbind_from_irq est\u00e1 liberando y limpiando actualmente. En este caso, aunque el canal de eventos est\u00e9 asignado, su asignaci\u00f3n se puede desarmar en evtchn_to_irq. La soluci\u00f3n es limpiar primero las asignaciones y luego cerrar el canal de eventos. De esta manera, cuando se asigna un canal de eventos, se garantiza que sus posibles asignaciones anteriores de evtchn_to_irq ya no estar\u00e1n configuradas. Este es tambi\u00e9n el orden inverso de la asignaci\u00f3n donde primero se asigna el canal de evento y luego se configuran las asignaciones. En un kernel 5.10 antes de commit 3fcdaf3d7634 (\"xen/events: modificar interfaces internas [un]bind\"), encontramos un ERROR como el siguiente durante el sondeo de dispositivos NVMe. El problema es que durante nvme_setup_io_queues, se llama a pci_free_irq para cada dispositivo, lo que resulta en una llamada a Shutdown_pirq. Por lo tanto, con muchos dispositivos nvme es probable que alcance esta ejecuci\u00f3n durante el arranque porque habr\u00e1 m\u00faltiples llamadas a Shutdown_pirq y startup_pirq que se ejecutan potencialmente en paralelo. ------------[ cortar aqu\u00ed ]------------ blkfront: xvda: barrera o descarga: deshabilitado; subvenciones persistentes: habilitadas; descriptores indirectos: habilitado; b\u00fafer de rebote: \u00a1ERROR del kernel habilitado en drivers/xen/events/events_base.c:499! c\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] SMP PTI CPU: 44 PID: 375 Comm: kworker/u257:23 No contaminado 5.10.201-191.748.amzn2.x86_64 #1 Nombre de hardware: Xen HVM domU, BIOS 4.11.amazon 24/08 /2006 Cola de trabajo: nvme-reset-wq nvme_reset_work RIP: 0010:bind_evtchn_to_cpu+0xdf/0xf0 C\u00f3digo: 5d 41 5e c3 cc cc cc cc 44 89 f7 e8 2b 55 ad ff 49 89 c5 48 85 c0 0f 84 64 ff ff ff 4c 8b 68 30 41 83 fe ff 0f 85 60 ff ff ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 RSP: 0000:ffffc9000d533b08 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000006 RDX: 0000000000000028 RSI: 00000000ffffffff RDI: 00000000ffffffff RBP: ffff888107419680 R08: 00000000000 00000 R09: ffffffff82d72b00 R10: 00000000000000000 R11: 0000000000000000 R12: 00000000000001ed R13: 00000000000000000 R14: 00000000ffffffff R15 : 0000000000000002 FS: 0000000000000000(0000) GS:ffff88bc8b500000( 0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000000000000 CR3: 0000000002610001 CR4: 000000000017 06e0 DR0: 0000000000000000 DR1: 00000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Seguimiento de llamadas: ? show_trace_log_lvl+0x1c1/0x2d9? show_trace_log_lvl+0x1c1/0x2d9? set_affinity_irq+0xdc/0x1c0? __die_body.cold+0x8/0xd ? morir+0x2b/0x50 ? do_trap+0x90/0x110? bind_evtchn_to_cpu+0xdf/0xf0? do_error_trap+0x65/0x80? bind_evtchn_to_cpu+0xdf/0xf0? exc_invalid_op+0x4e/0x70? bind_evtchn_to_cpu+0xdf/0xf0? asm_exc_invalid_op+0x12/0x20? bind_evtchn_to_cpu+0xdf/0x ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-459" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.37", + "versionEndExcluding": "6.1.81", + "matchCriteriaId": "AB843CC5-A764-49B4-992D-E8A603778A38" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0fc88aeb2e32b76db3fe6a624b8333dbe621b8fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/20980195ec8d2e41653800c45c8c367fa1b1f2b4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/585a344af6bcac222608a158fc2830ff02712af5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9470f5b2503cae994098dea9682aee15b313fa44", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9be71aa12afa91dfe457b3fb4a444c42b1ee036b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ea592baf9e41779fe9a0424c03dd2f324feca3b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa765c4b4aed2d64266b694520ecb025c862c5a9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0fc88aeb2e32b76db3fe6a624b8333dbe621b8fd", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/20980195ec8d2e41653800c45c8c367fa1b1f2b4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/585a344af6bcac222608a158fc2830ff02712af5", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9470f5b2503cae994098dea9682aee15b313fa44", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9be71aa12afa91dfe457b3fb4a444c42b1ee036b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ea592baf9e41779fe9a0424c03dd2f324feca3b3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa765c4b4aed2d64266b694520ecb025c862c5a9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26692.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26692.json index 5ee974f2036..fe1351499c0 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26692.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26692.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26692", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:52.610", - "lastModified": "2024-11-21T09:02:51.487", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:38:32.037", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,130 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: smb: se corrigi\u00f3 la regresi\u00f3n en las escrituras cuando se negoci\u00f3 un tama\u00f1o de escritura m\u00e1ximo no est\u00e1ndar. La conversi\u00f3n a netfs en el kernel 6.3 provoc\u00f3 una regresi\u00f3n cuando el servidor estableci\u00f3 el tama\u00f1o de escritura m\u00e1ximo en un valor inesperado. que no es un m\u00faltiplo de 4096 (de manera similar, si el usuario anula el tama\u00f1o m\u00e1ximo de escritura configurando el par\u00e1metro de montaje \"wsize\", pero lo establece en un valor que no es un m\u00faltiplo de 4096). Cuando el tama\u00f1o de escritura negociado no es un m\u00faltiplo de 4096, el c\u00f3digo netfs puede omitir el final de la p\u00e1gina final al realizar escrituras secuenciales grandes, lo que provoca corrupci\u00f3n de datos. Esta secci\u00f3n de c\u00f3digo se est\u00e1 reescribiendo/eliminando debido a un gran cambio en netfs, pero hasta ese momento (es decir, para el kernel 6.3 hasta ahora) no podemos admitir tama\u00f1os m\u00e1ximos de escritura no est\u00e1ndar. Agregue una advertencia si un usuario especifica un wsize en el montaje que no es un m\u00faltiplo de 4096 (y redondea hacia abajo), tambi\u00e9n agregue un cambio donde redondeamos hacia abajo el tama\u00f1o m\u00e1ximo de escritura si el servidor negocia un valor que no es un m\u00faltiplo de 4096 ( tambi\u00e9n tenemos que comprobar que no lo redondeamos a cero)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "DDF44457-CF5B-4B25-AD4C-B88268FE2054" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4145ccff546ea868428b3e0fe6818c6261b574a9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4860abb91f3d7fbaf8147d54782149bb1fc45892", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/63c35afd50e28b49c5b75542045a8c42b696dab9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4145ccff546ea868428b3e0fe6818c6261b574a9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4860abb91f3d7fbaf8147d54782149bb1fc45892", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/63c35afd50e28b49c5b75542045a8c42b696dab9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26693.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26693.json index b67a46a9fc6..ad7ffcf89d5 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26693.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26693.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26693", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:52.667", - "lastModified": "2024-11-21T09:02:51.593", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:37:25.507", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,130 @@ "value": "En el kernel de Linux se ha solucionado la siguiente vulnerabilidad: wifi: iwlwifi: mvm: soluciona un fallo cuando nos quedamos sin estaciones Una herramienta DoS que inyecta un mont\u00f3n de marcos de autenticaci\u00f3n hac\u00eda que nuestro AP fallara. La funci\u00f3n iwl_mvm_is_dup() no pudo encontrar los datos dup_data por cola que no estaban asignados. La causa principal de esto es que nos quedamos sin estaciones en el firmware y realmente no agregamos la estaci\u00f3n al firmware, pero no devolvimos un error a mac80211. Mac80211 estaba pensando que ten\u00edamos la estaci\u00f3n y debido a eso, sta_info::uploaded se configur\u00f3 en 1. Esto permiti\u00f3 que ieee80211_find_sta_by_ifaddr() devolviera un objeto de estaci\u00f3n v\u00e1lido, pero que ieee80211_sta no ten\u00eda ning\u00fan objeto iwl_mvm_sta inicializado y eso caus\u00f3 el bloqueo. Mencion\u00e9 anteriormente cuando obtuvimos Rx en esa estaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "36E1DD5F-520C-45E0-A857-81C3B5CB12FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/00f4eb31b8193f6070ce24df636883f9c104ca95", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b7198383ef2debe748118996f627452281cf27d7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c12f0f4d4caf23b1bfdc2602b6b70d56bdcd6aa7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/00f4eb31b8193f6070ce24df636883f9c104ca95", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b7198383ef2debe748118996f627452281cf27d7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c12f0f4d4caf23b1bfdc2602b6b70d56bdcd6aa7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26696.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26696.json index 0f3020e42ec..160b887272d 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26696.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26696.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26696", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:52.830", - "lastModified": "2024-11-21T09:02:51.970", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:37:03.493", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,259 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: nilfs2: corrige un bloqueo en nilfs_lookup_dirty_data_buffers() Syzbot inform\u00f3 un problema de bloqueo en migrar_pages_batch() llamado por mbind() y nilfs_lookup_dirty_data_buffers() llamado en el escritor de registros de nilfs2. Mientras migrar_pages_batch() bloquea una publicaci\u00f3n y espera a que se complete la reescritura, el subproceso del escritor de registros que deber\u00eda completar la reescritura recoge la publicaci\u00f3n que se est\u00e1 reescribiendo en nilfs_lookup_dirty_data_buffers() que solicita la creaci\u00f3n de registros posteriores y estaba intentando bloquear la fol. Provocando as\u00ed un punto muerto. En primer lugar, es inesperado que los folios/p\u00e1ginas en medio de la reescritura se actualicen y se ensucien. Nilfs2 agrega una suma de verificaci\u00f3n para verificar la validez del registro que se est\u00e1 escribiendo y la usa para la recuperaci\u00f3n en el montaje, de modo que se suprimen los cambios de datos durante la reescritura. Dado que esto no funciona, un cierre incorrecto podr\u00eda provocar que falle la recuperaci\u00f3n. La investigaci\u00f3n revel\u00f3 que la causa principal es que la espera para que se complete la reescritura en nilfs_page_mkwrite() es condicional, y si el dispositivo de respaldo no requiere escrituras estables, los datos se pueden modificar sin esperar. Solucione estos problemas haciendo que nilfs_page_mkwrite() espere a que finalice la reescritura independientemente del requisito de escritura estable del dispositivo de respaldo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.9", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "75050D33-F4EC-4DEC-B7C5-E201A6C0D8B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "656E2F29-1779-4EFC-AA64-8F984E2885B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/228742b2ddfb99dfd71e5a307e6088ab6836272e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/38296afe3c6ee07319e01bb249aa4bb47c07b534", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e9b622bd0748cc104d66535b76d9b3535f9dc0f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8494ba2c9ea00a54d5b50e69b22c55a8958bce32", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/862ee4422c38be5c249844a684b00d0dbe9d1e46", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98a4026b22ff440c7f47056481bcbbe442f607d6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e38585401d464578d30f5868ff4ca54475c34f7d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ea5ddbc11613b55e5128c85f57b08f907abd9b28", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/228742b2ddfb99dfd71e5a307e6088ab6836272e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/38296afe3c6ee07319e01bb249aa4bb47c07b534", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e9b622bd0748cc104d66535b76d9b3535f9dc0f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8494ba2c9ea00a54d5b50e69b22c55a8958bce32", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/862ee4422c38be5c249844a684b00d0dbe9d1e46", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98a4026b22ff440c7f47056481bcbbe442f607d6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e38585401d464578d30f5868ff4ca54475c34f7d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ea5ddbc11613b55e5128c85f57b08f907abd9b28", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26697.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26697.json index 26d7022f77f..7584f50b282 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26697.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26697.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26697", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:52.880", - "lastModified": "2024-11-21T09:02:52.090", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:37:12.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,258 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: nilfs2: corrige la corrupci\u00f3n de datos en la recuperaci\u00f3n de bloques dsync para tama\u00f1os de bloques peque\u00f1os La funci\u00f3n auxiliar nilfs_recovery_copy_block() de nilfs_recovery_dsync_blocks(), que recupera datos de los registros creados por escrituras de sincronizaci\u00f3n de datos durante un montaje despu\u00e9s un apagado incorrecto calcula incorrectamente el desplazamiento en la p\u00e1gina al copiar los datos de reparaci\u00f3n en la memoria cach\u00e9 de la p\u00e1gina del archivo. En entornos donde el tama\u00f1o del bloque es menor que el tama\u00f1o de la p\u00e1gina, esta falla puede causar corrupci\u00f3n de datos y p\u00e9rdida de bytes de memoria no inicializados durante el proceso de recuperaci\u00f3n. Solucione estos problemas corrigiendo este c\u00e1lculo de desplazamiento de bytes en la p\u00e1gina." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.19.307", + "matchCriteriaId": "4B4E1A83-9957-4265-94C0-516374C8CCFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.269", + "matchCriteriaId": "319545F3-D56C-4751-BEBF-0505478BBAE8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "F5CB4CA6-A9A0-4AFD-9102-8CF94D708170" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "656E2F29-1779-4EFC-AA64-8F984E2885B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/120f7fa2008e3bd8b7680b4ab5df942decf60fd5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2000016bab499074e6248ea85aeea7dd762355d9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e1480538ef60bfee5473dfe02b1ecbaf1a4aa0d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/364a66be2abdcd4fd426ffa44d9b8f40aafb3caa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5278c3eb6bf5896417572b52adb6be9d26e92f65", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67b8bcbaed4777871bb0dcc888fb02a614a98ab1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c9c68d64fd3284f7097ed6ae057c8441f39fcd3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a6efe6dbaaf504f5b3f8a5c3f711fe54e7dda0ba", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/120f7fa2008e3bd8b7680b4ab5df942decf60fd5", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2000016bab499074e6248ea85aeea7dd762355d9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e1480538ef60bfee5473dfe02b1ecbaf1a4aa0d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/364a66be2abdcd4fd426ffa44d9b8f40aafb3caa", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5278c3eb6bf5896417572b52adb6be9d26e92f65", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67b8bcbaed4777871bb0dcc888fb02a614a98ab1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c9c68d64fd3284f7097ed6ae057c8441f39fcd3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a6efe6dbaaf504f5b3f8a5c3f711fe54e7dda0ba", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-266xx/CVE-2024-26698.json b/CVE-2024/CVE-2024-266xx/CVE-2024-26698.json index a4d8f6f226d..98f308845bc 100644 --- a/CVE-2024/CVE-2024-266xx/CVE-2024-26698.json +++ b/CVE-2024/CVE-2024-266xx/CVE-2024-26698.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26698", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:52.933", - "lastModified": "2024-11-21T09:02:52.217", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:36:53.817", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,59 +15,205 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: hv_netvsc: corrige la condici\u00f3n de ejecuci\u00f3n entre netvsc_probe y netvsc_remove En el commit ac5047671758 (\"hv_netvsc: deshabilite NAPI antes de cerrar el canal VMBus\"), se llamaba a napi_disable para todos los canales, incluidos todos los subcanales sin confirmando si est\u00e1n habilitados o no. Esto provoc\u00f3 que hv_netvsc se colgara en napi_disable, cuando netvsc_probe() termin\u00f3 de ejecutarse pero nvdev->subchan_work a\u00fan no se inici\u00f3. netvsc_subchan_work() -> rndis_set_subchannel() no ha creado los subcanales y por eso netvsc_sc_open() no se est\u00e1 ejecutando. netvsc_remove() llama a cancel_work_sync(&nvdev->subchan_work), para lo cual netvsc_subchan_work no se ejecut\u00f3. netif_napi_add() establece el bit NAPI_STATE_SCHED porque garantiza que NAPI no se pueda programar. Luego netvsc_sc_open() -> napi_enable borrar\u00e1 el bit NAPIF_STATE_SCHED, para que pueda programarse. napi_disable() hace lo contrario. Ahora, durante netvsc_device_remove(), cuando se llama a napi_disable para esos subcanales, napi_disable se atasca en msleep infinito. Esta soluci\u00f3n soluciona este problema garantizando que no se llame a napi_disable() para una estructura NAPI no habilitada. Pero netif_napi_del() sigue siendo necesario para estas estructuras NAPI no habilitadas con fines de limpieza. Rastreo de llamadas: [654.559417] tarea:modprobe estado:D pila: 0 pid: 2321 ppid: 1091 banderas:0x00004002 [654.568030] Rastreo de llamadas: [654.571221] [654.573790] __schedule+0x2d6/0x960 [ 65 4.577733] horario+0x69 /0xf0 [654.581214] Schedule_timeout+0x87/0x140 [654.585463]? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 6 54.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [654.611101]? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.8", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "9487D7F4-8434-4668-8C1F-256A25094E23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "656E2F29-1779-4EFC-AA64-8F984E2885B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0e8875de9dad12805ff66e92cd5edea6a421f1cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22a77c0f5b8233237731df3288d067af51a2fd7b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/48a8ccccffbae10c91d31fc872db5c31aba07518", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7656372ae190e54e8c8cf1039725a5ea59fdf84a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ec807e7b6f5fcf9499f3baa69f254bb239a847f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e0526ec5360a48ad3ab2e26e802b0532302a7e11", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0e8875de9dad12805ff66e92cd5edea6a421f1cd", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22a77c0f5b8233237731df3288d067af51a2fd7b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/48a8ccccffbae10c91d31fc872db5c31aba07518", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7656372ae190e54e8c8cf1039725a5ea59fdf84a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ec807e7b6f5fcf9499f3baa69f254bb239a847f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e0526ec5360a48ad3ab2e26e802b0532302a7e11", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26705.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26705.json index 537511743b9..afc0bee16c6 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26705.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26705.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26705", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:53.243", - "lastModified": "2024-11-21T09:02:53.087", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:36:41.633", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,120 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: parisc: BTLB: soluciona el problema al configurar BTLB al iniciar la CPU. Al usar hotplug y activar una CPU de 32 bits, solicite al firmware la informaci\u00f3n de BTLB para configurar la est\u00e1tica ( bloque) Entradas TLB. Para eso se necesita acceso de escritura a la estructura est\u00e1tica btlb_info, pero como est\u00e1 marcada como __ro_after_init, el kernel falla por defecto y faltan permisos de escritura. Solucione el problema eliminando la anotaci\u00f3n __ro_after_init." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "8ED485BB-BF8B-4D25-809B-B538663EA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26706.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26706.json index 9860ef00083..c455aa48a00 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26706.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26706.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26706", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:53.293", - "lastModified": "2024-11-21T09:02:53.200", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:36:31.360", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,140 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: parisc: corrige la corrupci\u00f3n aleatoria de datos del controlador de excepciones La implementaci\u00f3n actual del controlador de excepciones, que ayuda al acceder a la memoria del espacio del usuario, puede exhibir corrupci\u00f3n aleatoria de datos si el compilador decide usar un registro diferente al el registro especificado %r29 (definido en ASM_EXCEPTIONTABLE_REG) para el c\u00f3digo de error. Si el compilador elige otro registro, el manejador de fallas almacenar\u00e1 -EFAULT en %r29 y, por lo tanto, eliminar\u00e1 cualquier cosa para la que se utilice este registro. Al observar el ensamblaje, encontr\u00e9 que esto sucede a veces en emulate_ldd(). Para resolver el problema, la soluci\u00f3n m\u00e1s sencilla ser\u00eda si de alguna manera fuera posible decirle al manejador de fallas qu\u00e9 registro se utiliza para contener el c\u00f3digo de error. No es posible usar %0 o %1 en el ensamblador en l\u00ednea ya que aparecer\u00e1, por ejemplo, como %r29 (con el prefijo \"%r\"), que el ensamblador GNU no puede convertir a un n\u00famero entero. Este parche adopta otro enfoque mejor y m\u00e1s flexible: ampliamos el __ex_table (que est\u00e1 fuera de la ruta de ejecuci\u00f3n) en 32 palabras. En esta palabra le decimos al compilador que inserte la instrucci\u00f3n ensambladora \"o %r0,%r0,%reg\", donde %reg hace referencia al registro que el compilador eligi\u00f3 para el c\u00f3digo de retorno de error. En caso de un error de acceso, el controlador de fallas encuentra la entrada __ex_table y puede examinar el c\u00f3digo de operaci\u00f3n. El registro utilizado est\u00e1 codificado en los 5 bits m\u00e1s bajos y el manejador de fallas puede almacenar -EFAULT en este registro. Dado que ampliamos __ex_table a 3 palabras, ya no podemos usar la opci\u00f3n de configuraci\u00f3n BUILDTIME_TABLE_SORT." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "0CD66F01-9687-41BC-ADEE-C4E51121167A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/23027309b099ffc4efca5477009a11dccbdae592", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b1d72395635af45410b66cc4c4ab37a12c4a831", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce31d79aa1f13a2345791f84935281a2c194e003", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa69a8063f8b27f3c7434a0d4f464a76a62f24d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/23027309b099ffc4efca5477009a11dccbdae592", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b1d72395635af45410b66cc4c4ab37a12c4a831", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce31d79aa1f13a2345791f84935281a2c194e003", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa69a8063f8b27f3c7434a0d4f464a76a62f24d2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26707.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26707.json index f6c0cd759b2..550cc49ad62 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26707.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26707.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26707", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:53.340", - "lastModified": "2024-11-21T09:02:53.313", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:36:22.873", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,59 +15,205 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net: hsr: eliminar WARN_ONCE() en send_hsr_supervision_frame() Syzkaller inform\u00f3 [1] que apareci\u00f3 una advertencia despu\u00e9s de no poder asignar recursos para skb en hsr_init_skb(). Dado que una llamada WARN_ONCE() no ayudar\u00e1 mucho en este caso, podr\u00eda ser prudente cambiar a netdev_warn_once(). Como m\u00ednimo, suprimir\u00e1 informes de syzkaller como [1]. Por las dudas, utilice netdev_warn_once() en send_prp_supervision_frame() por motivos similares. [1] HSR: No se pudo enviar la trama de supervisi\u00f3n ADVERTENCIA: CPU: 1 PID: 85 en net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x60a/0x810 net/hsr/hsr_device.c:294 RIP: 0010:send_hsr_supervision_frame+0x60a/ 0x810 net/hsr/hsr_device.c:294 ... Seguimiento de llamadas: hsr_announce+0x114/0x370 net/hsr/hsr_device.c:382 call_timer_fn+0x193/0x590 kernel/time/timer.c:1700 expire_timers kernel/ time/timer.c:1751 [en l\u00ednea] __run_timers+0x764/0xb20 kernel/time/timer.c:2022 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035 __do_softirq+0x21a/0x8de kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [en l\u00ednea] __irq_exit_rcu kernel/softirq.c:632 [en l\u00ednea] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c :1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 ... Este problema tambi\u00e9n se encuentra en kernels m\u00e1s antiguos (al menos hasta 5.10)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "393FFD59-45A0-4C2A-A547-8B90CE3BBAA1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "656E2F29-1779-4EFC-AA64-8F984E2885B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0d8011a878fdf96123bc0d6a12e2fe7ced5fddfb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/37e8c97e539015637cb920d3e6f1e404f707a06e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/547545e50c913861219947ce490c68a1776b9b51", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/56440799fc4621c279df16176f83a995d056023a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/923dea2a7ea9e1ef5ac4031fba461c1cc92e32b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de769423b2f053182a41317c4db5a927e90622a0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0d8011a878fdf96123bc0d6a12e2fe7ced5fddfb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/37e8c97e539015637cb920d3e6f1e404f707a06e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/547545e50c913861219947ce490c68a1776b9b51", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/56440799fc4621c279df16176f83a995d056023a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/923dea2a7ea9e1ef5ac4031fba461c1cc92e32b8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de769423b2f053182a41317c4db5a927e90622a0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26710.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26710.json index 720d2c0820c..a7420251afa 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26710.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26710.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26710", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:53.487", - "lastModified": "2024-11-21T09:02:53.723", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:36:11.620", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,131 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: powerpc/kasan: limitar el aumento del tama\u00f1o del subproceso KASAN a 32 KB. Se considera que KASAN aumenta el uso de la pila, hasta el punto de que se inform\u00f3 que provoca un desbordamiento de la pila en algunas m\u00e1quinas de 32 bits ( ver enlace). Para evitar desbordamientos, el tama\u00f1o de la pila se duplic\u00f3 para las compilaciones de KASAN en el commit 3e8635fb2e07 (\"powerpc/kasan: Forzar el aumento del tama\u00f1o del subproceso con KASAN\"). Sin embargo, con un tama\u00f1o de pila de 32 KB para empezar, la duplicaci\u00f3n conduce a una pila de 64 KB, lo que provoca errores de compilaci\u00f3n: arch/powerpc/kernel/switch.S:249: Error: operando fuera de rango (0x000000000000fe50 no est\u00e1 entre 0xffffffffffff8000 y 0x00000000000007fff) Aunque el conjunto podr\u00eda modificarse, en la pr\u00e1ctica una pila de 32 KB parece suficiente incluso para compilaciones KASAN; el uso adicional parece estar en el rango de 2 a 3 KB para una compilaci\u00f3n KASAN de 64 bits. Por lo tanto, solo aumente la pila para KASAN si el tama\u00f1o de la pila es <32 KB." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.75", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "E45DC1AD-08BC-4CC1-A959-E47949DF8C4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.14", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "D414D75C-C82B-4167-B493-0F5458C4D8FC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7.2", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "B739F4F8-3AC5-4589-83F6-43218BC20877" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4297217bcf1f0948a19c2bacc6b68d92e7778ad9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4cc31fa07445879a13750cb061bb8c2654975fcb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b29b16bd836a838b7690f80e37f8376414c74cbe", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1acb109505d983779bbb7e20a1ee6244d2b5736", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26714.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26714.json index 173d4c42e9e..69bb59bf725 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26714.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26714.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26714", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:53.700", - "lastModified": "2024-11-21T09:02:54.257", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T15:36:01.447", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,151 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: interconexi\u00f3n: qcom: sc8180x: Mark CO0 BCM keepalive El CO0 BCM debe estar activo en todo momento; de lo contrario, alg\u00fan hardware (como el controlador UFS) pierde su conexi\u00f3n con el resto del SoC, lo que provoc\u00f3 un bloqueo de la plataforma, acompa\u00f1ado de un espectacular logspam. M\u00e1rquelo como keepalive para evitar tales casos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "6EE2CFD9-B805-45AF-95E7-7D3EF472A35F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/6616d3c4f8284a7b3ef978c916566bd240cea1c7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a3a70dd08e4b7dffc2f86f2c68fc3812804b9d0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/85e985a4f46e462a37f1875cb74ed380e7c0c2e0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d8e36ff40cf9dadb135f3a97341c02c9a7afcc43", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6616d3c4f8284a7b3ef978c916566bd240cea1c7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a3a70dd08e4b7dffc2f86f2c68fc3812804b9d0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/85e985a4f46e462a37f1875cb74ed380e7c0c2e0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d8e36ff40cf9dadb135f3a97341c02c9a7afcc43", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26718.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26718.json index 88c36b51a51..bba5bb2965d 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26718.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26718.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26718", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:53.897", - "lastModified": "2024-11-21T09:02:54.723", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:01:17.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,148 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm-crypt, dm-verity: deshabilitar tasklets Los tasklets tienen un problema inherente con la corrupci\u00f3n de la memoria. La funci\u00f3n tasklet_action_common llama a tasklet_trylock, luego llama a la devoluci\u00f3n de llamada del tasklet y luego llama a tasklet_unlock. Si la devoluci\u00f3n de llamada del tasklet libera la estructura que contiene el tasklet o si llama a alg\u00fan c\u00f3digo que pueda liberarlo, tasklet_unlock escribir\u00e1 en la memoria libre. Las confirmaciones 8e14f610159d y d9a02e016aaf intentan solucionarlo para dm-crypt, pero no es una soluci\u00f3n suficiente y la corrupci\u00f3n de datos a\u00fan puede ocurrir [1]. No hay ninguna soluci\u00f3n para dm-verity y dm-verity escribir\u00e1 en la memoria libre con cada biograf\u00eda procesada por tasklet. Habr\u00e1 colas de trabajo at\u00f3micas implementadas en el kernel 6.9 [2]. Tendr\u00e1n una mejor interfaz y no sufrir\u00e1n el problema de corrupci\u00f3n de memoria. Pero necesitamos algo que detenga la corrupci\u00f3n de la memoria ahora y que pueda ser compatible con los n\u00facleos estables. Entonces, propongo esta confirmaci\u00f3n que deshabilita los tasklets tanto en dm-crypt como en dm-verity. Esta confirmaci\u00f3n no elimina la compatibilidad con el tasklet, porque el c\u00f3digo del tasklet se reutilizar\u00e1 cuando se implementen las colas de trabajo at\u00f3micas. [1] https://lore.kernel.org/all/d390d7ee-f142-44d3-822a-87949e14608b@suse.de/T/ [2] https://lore.kernel.org/lkml/20240130091300.2968534-1- tj@kernel.org/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "9306FADC-BB71-4E0E-81A3-662E21C9A9F1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a9bab391e336489169b95cb0d4553d921302189", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0c45a20cbe68bc4d681734f5c03891124a274257", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/30884a44e0cedc3dfda8c22432f3ba4078ec2d94", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5735a2671ffb70ea29ca83969fe01316ee2ed6fc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b825e0f9d68c178072bffd32dd34c39e3d2d597a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0a9bab391e336489169b95cb0d4553d921302189", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0c45a20cbe68bc4d681734f5c03891124a274257", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/30884a44e0cedc3dfda8c22432f3ba4078ec2d94", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5735a2671ffb70ea29ca83969fe01316ee2ed6fc", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26721.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26721.json index f278a2c339c..5ec0d34a676 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26721.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26721.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26721", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:54.043", - "lastModified": "2024-11-21T09:02:55.100", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:01:40.143", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,109 @@ "value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: drm/i915/dsc: corrige la macro que calcula la direcci\u00f3n de registro DSCC_/DSCA_ PPS Commit bd077259d0a9 (\"drm/i915/vdsc: Agregar funci\u00f3n para leer cualquier registro PPS\") define un Nueva macro para calcular las direcciones de registro DSC PPS con el n\u00famero PPS como entrada. Esta macro calcula correctamente las direcciones hasta PPS 11 ya que las direcciones se incrementan en 4. Entonces, en ese caso, la siguiente macro funciona correctamente para proporcionar la direcci\u00f3n de registro correcta: _MMIO(_DSCA_PPS_0 + (pps) * 4) Sin embargo, despu\u00e9s de PPS 11, la direcci\u00f3n de registro para PPS 12 se incrementa en 12 debido a la asignaci\u00f3n de memoria del b\u00fafer RC en el medio. Debido a esta discontinuidad en el espacio de direcciones, la macro calcula direcciones incorrectas para PPS 12 - 16, lo que genera lecturas/escrituras incorrectas del valor del par\u00e1metro PPS de DSC, lo que provoca corrupci\u00f3n de DSC. Esto se soluciona corrigiendo esta macro para agregar el desplazamiento de 12 para PPS >=12. v3: agregue par\u00e9ntesis correcto para el argumento pps (Jani Nikula) (seleccionado del commit 6074be620c31dc2ae11af96a1a5ea95580976fb5)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-131" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/962ac2dce56bb3aad1f82a4bbe3ada57a020287c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff5999fb03f467e1e7159f0ddb199c787f7512b9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/962ac2dce56bb3aad1f82a4bbe3ada57a020287c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff5999fb03f467e1e7159f0ddb199c787f7512b9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26726.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26726.json index dfbe9de543d..d885470c4b9 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26726.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26726.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26726", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:54.313", - "lastModified": "2024-11-21T09:02:55.767", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:01:56.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,150 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: btrfs: no elimine extend_map para el inodo de espacio libre en el error de escritura Mientras ejecutaba el CI para un cambio no relacionado, encontr\u00e9 el siguiente p\u00e1nico con generic/648 en btrfs_holes_spacecache. error de aserci\u00f3n: block_start != EXTENT_MAP_HOLE, en fs/btrfs/extent_io.c:1385 ------------[ cortar aqu\u00ed ]------------ ERROR del kernel en fs /btrfs/extent_io.c:1385! c\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 2695096 Comm: fsstress Kdump: cargado Contaminado: GW 6.8.0-rc2+ #1 RIP: 0010:__extent_writepage_io.constprop.0+0x4c1/0x5c0 Seguimiento de llamadas: < TAREA> extensi\u00f3n_write_cache_pages+0x2ac/0x8f0 extensi\u00f3n_writepages+0x87/0x110 do_writepages+0xd5/0x1f0 filemap_fdatawrite_wbc+0x63/0x90 __filemap_fdatawrite_range+0x5c/0x80 btrfs_fdatawrite_range+0x1f/0x50 btrfs_write_out_ca che+0x507/0x560 btrfs_write_dirty_block_groups+0x32a/0x420 commit_cowonly_roots+0x21b/0x290 btrfs_commit_transaction+0x813 /0x1360 btrfs_sync_file+0x51a/0x640 __x64_sys_fdatasync+0x52/0x90 do_syscall_64+0x9c/0x190 Entry_SYSCALL_64_after_hwframe+0x6e/0x76 Esto sucede porque no logramos escribir el espacio libre en cach\u00e9 en una instancia, volvemos e intentamos escribirlo nuevamente. Sin embargo, en el segundo paso, llamamos a btrfs_get_extent() en el inodo para obtener el mapeo de extensi\u00f3n. Debido a que este es un nuevo grupo de bloques, y con el inodo de espacio libre siempre buscamos la ra\u00edz de confirmaci\u00f3n para evitar un punto muerto con el \u00e1rbol, no encontramos nada y devolvemos un EXTENT_MAP_HOLE para el rango solicitado. Esto sucede porque la primera vez que intentamos escribir el cach\u00e9 de espacio, encontramos un error y, en caso de error, descartamos la asignaci\u00f3n de extensi\u00f3n. Esto es normal para archivos normales, pero el inodo de cach\u00e9 de espacio libre es especial. Siempre esperamos que el mapa de extensi\u00f3n sea correcto. Por lo tanto, la segunda vez terminamos con un mapa de extensi\u00f3n falso. Dado que estamos desaprobando esta funci\u00f3n, la forma m\u00e1s sencilla de solucionarlo es simplemente omitir la eliminaci\u00f3n del rango del mapa de extensi\u00f3n para este rango fallido. Acort\u00e9 la prueba usando inyecci\u00f3n de error para enfatizar el \u00e1rea y facilitar su reproducci\u00f3n. Con este parche implementado, ya no entraremos en p\u00e1nico con mi prueba de inyecci\u00f3n de errores." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "0CD66F01-9687-41BC-ADEE-C4E51121167A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/02f2b95b00bf57d20320ee168b30fb7f3db8e555", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5571e41ec6e56e35f34ae9f5b3a335ef510e0ade", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7bddf18f474f166c19f91b2baf67bf7c5eda03f7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a4b7741c8302e28073bfc6dd1c2e73598e5e535e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/02f2b95b00bf57d20320ee168b30fb7f3db8e555", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5571e41ec6e56e35f34ae9f5b3a335ef510e0ade", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7bddf18f474f166c19f91b2baf67bf7c5eda03f7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a4b7741c8302e28073bfc6dd1c2e73598e5e535e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26727.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26727.json index 6c640517ccb..c6ee32fadd0 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26727.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26727.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26727", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T15:15:54.367", - "lastModified": "2024-11-21T09:02:55.880", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:02:14.380", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,59 +15,210 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: btrfs: no haga ASSERT() si el subvolumen reci\u00e9n creado ya se ley\u00f3 [ERROR] Hay un bloqueo del syzbot, provocado por ASSERT() durante la creaci\u00f3n del subvolumen: la aserci\u00f3n fall\u00f3: ! anon_dev, en fs/btrfs/disk-io.c:1319 ------------[ cortar aqu\u00ed ]------------ ERROR del kernel en fs/btrfs/disk -io.c:1319! c\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] PREEMPT SMP KASAN RIP: 0010:btrfs_get_root_ref.part.0+0x9aa/0xa60 btrfs_get_new_fs_root+0xd3/0xf0 create_subvol+0xd02/0x1650 btrfs_mksubvol+0xe95/0x12b0 __ btrfs_ioctl_snap_create+0x2f9/0x4f0 btrfs_ioctl_snap_create+0x16b /0x200 btrfs_ioctl+0x35f0/0x5cf0 __x64_sys_ioctl+0x19d/0x210 do_syscall_64+0x3f/0xe0 Entry_SYSCALL_64_after_hwframe+0x63/0x6b ---[ end trace 0000000000000000 ]--- [CA USO] Durante create_subvol(), despu\u00e9s de insertar el elemento ra\u00edz para el subvolumen reci\u00e9n creado , activar\u00edamos btrfs_get_new_fs_root() para obtener el btrfs_root de ese subvolumen. La idea aqu\u00ed es que hemos preasignado un n\u00famero de dispositivo an\u00f3nimo para el subvolumen, por lo que podemos asignarlo al nuevo subvolumen. Pero realmente no hay nada que impida que cosas como backref caminen para leer el nuevo subvolumen. Si eso sucede antes de que llamemos a btrfs_get_new_fs_root(), se leer\u00e1 el subvolumen y ya se habr\u00e1 asignado un nuevo n\u00famero de dispositivo an\u00f3nimo. En ese caso, activar\u00edamos ASSERT(), ya que realmente esperamos que nadie lea ese subvolumen (al que a\u00fan no se puede acceder desde fs). Pero a\u00fan es posible realizar cosas como el recorrido de referencia atr\u00e1s para activar la lectura en el subvolumen. Por lo tanto, nuestra suposici\u00f3n sobre ASSERT() no es correcta en primer lugar. [FIX] Arr\u00e9glelo eliminando ASSERT() y simplemente libere @anon_dev, restablezcalo a 0 y contin\u00fae. Si otra cosa lee el \u00e1rbol de subvolumen, ya deber\u00eda tener asignado un nuevo anon_dev, por lo que solo necesitamos liberar el preasignado." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.9", + "versionEndExcluding": "5.10.210", + "matchCriteriaId": "393FFD59-45A0-4C2A-A547-8B90CE3BBAA1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.149", + "matchCriteriaId": "0D0465BB-4053-4E15-9137-6696EBAE90FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.79", + "matchCriteriaId": "656E2F29-1779-4EFC-AA64-8F984E2885B1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.18", + "matchCriteriaId": "BD961E49-FEDA-47CF-BF23-4D2BD942B4E0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.6", + "matchCriteriaId": "C6D6A5C8-7308-42A9-8A72-ABF3DEA4BB82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3f5d47eb163bceb1b9e613c9003bae5fefc0046f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5a172344bfdabb46458e03708735d7b1a918c468", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/66b317a2fc45b2ef66527ee3f8fa08fb5beab88d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/833775656d447c545133a744a0ed1e189ce61430", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e03ee2fe873eb68c1f9ba5112fee70303ebf9dfb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e31546b0f34af21738c4ceac47d662c00ee6382f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3f5d47eb163bceb1b9e613c9003bae5fefc0046f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5a172344bfdabb46458e03708735d7b1a918c468", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/66b317a2fc45b2ef66527ee3f8fa08fb5beab88d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/833775656d447c545133a744a0ed1e189ce61430", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e03ee2fe873eb68c1f9ba5112fee70303ebf9dfb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e31546b0f34af21738c4ceac47d662c00ee6382f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26730.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26730.json index 7df0d67ffc8..194d602b271 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26730.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26730.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26730", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:50.873", - "lastModified": "2024-11-21T09:02:56.220", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:02:28.967", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,140 @@ "value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: hwmon: (nct6775) Arreglar el acceso a los registros de configuraci\u00f3n de temperatura El n\u00famero de registros de configuraci\u00f3n de temperatura no siempre coincide con el n\u00famero total de registros de temperatura. Esto puede resultar en errores de acceso reportados si KASAN est\u00e1 habilitado. ERROR: KASAN: global fuera de los l\u00edmites en nct6775_probe+0x5654/0x6fe9 nct6775_core" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "67629862-377E-46FA-A747-4A0BC6C42DD8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.6.19:*:*:*:*:*:*:*", + "matchCriteriaId": "4950DEE3-1563-46A6-A208-AFB64313B4F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c196387820c9214c5ceaff56d77303c82514b8b1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d56e460e19ea8382f813eb489730248ec8d7eb73", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f006c45a3ea424f8f6c8e4b9283bc245ce2a4d0f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26733.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26733.json index 9e51edd0a9e..5a41e20df55 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26733.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26733.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26733", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.040", - "lastModified": "2024-11-21T09:02:56.620", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:02:47.887", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,63 +15,951 @@ "value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: arp: Evita el desbordamiento en arp_req_get(). syzkaller inform\u00f3 una escritura desbordada en arp_req_get(). [0] Cuando se emite ioctl(SIOCGARP), arp_req_get() busca una entrada vecina y copia neigh->ha para estructurar arpreq.arp_ha.sa_data. El arp_ha aqu\u00ed es struct sockaddr, no struct sockaddr_storage, por lo que el b\u00fafer sa_data tiene solo 14 bytes. En el siguiente s\u00edmbolo, se desbordan 2 bytes al siguiente campo int, arp_flags. Inicializamos el campo justo despu\u00e9s de memcpy(), por lo que no es un problema. Sin embargo, cuando dev->addr_len es mayor que 22 (por ejemplo, MAX_ADDR_LEN), se sobrescribe arp_netmask, que podr\u00eda configurarse como htonl(0xFFFFFFFFUL) en arp_ioctl() antes de llamar a arp_req_get(). Para evitar el desbordamiento, limitemos la longitud m\u00e1xima de memcpy(). Tenga en cuenta que el commit b5f0de6df6dc (\"net: dev: Convert sa_data to flexible array in struct sockaddr\") simplemente silenci\u00f3 a syzkaller. [0]: memcpy: escritura detectada en todos los campos (tama\u00f1o 16) de un solo campo \"r->arp_ha.sa_data\" en net/ipv4/arp.c:1128 (tama\u00f1o 14) ADVERTENCIA: CPU: 0 PID: 144638 en net /ipv4/arp.c:1128 arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 M\u00f3dulos vinculados en: CPU: 0 PID: 144638 Comm: syz-executor.4 No contaminado 6.1.74 #31 Nombre de hardware: QEMU PC est\u00e1ndar (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 01/04/2014 RIP: 0010:arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 C\u00f3digo: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb <0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6 RSP: 0018:ffffc900050b7998 EFLAGS: 00010286 RAX: 00000000000000000 RBX: ffff88803a815000 RCX: 0000000000000 000 RDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001 RBP: ffffc900050b7a98 R08: 00000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000 R13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010 FS: 0000 7f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4 : 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 00000000000000000 DR6: 00000000ffe0ff0 DR7: 000000 0000000400 PKRU: 55555554 Seguimiento de llamadas: arp_ioctl+0x33f/0x4b0 net/ipv4/arp.c:1261 inet_ioctl+0x314/0x3a0 net/ ipv4/af_inet.c:981 sock_do_ioctl+0xdf/0x260 net/socket.c:1204 sock_ioctl+0x3ef/0x650 net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [en l\u00ednea] __do_sys_ioctl fs/ioctl.c:870 [en l\u00ednea] __se_sys_ioctl fs/ioctl.c:856 [en l\u00ednea] __x64_sys_ioctl+0x18e/0x220 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:51 [en l\u00ednea] do_syscall_64+0x37/0x90 arch/x86/ entrada/common.c:81 entrada_SYSCALL_64_after_hwframe+0x64/0xce RIP: 0033:0x7f172b262b8d C\u00f3digo: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f172bf300b8 EFLAGS: 0000024 6 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX : 00007f172b3abf80 RCX: 00007f172b262b8d RDX: 0000000020000000 RSI: 0000000000008954 RDI: 00000000000000003 RBP: 00007f172b2d3493 R08: 0 000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000000 R13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.12", + "versionEndExcluding": "5.10.211", + "matchCriteriaId": "B4CCA1E9-0CE8-4426-B907-F914F12E5D02" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.150", + "matchCriteriaId": "CB6C60DE-9E0C-46C5-904D-D4F4031F8E95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "BA7850CE-97C9-4408-A348-6173296BCA2B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.10.211:*:*:*:*:*:*:*", + "matchCriteriaId": "F4984E31-DB63-4A46-BA66-9DE0977CDECB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a1k_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7F65C59D-249A-4790-892C-B78CF82E51CF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a1k:*:*:*:*:*:*:*:*", + "matchCriteriaId": "9F1BD97F-CA60-4401-B1A0-EC4EA5647251" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a70_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6F7D6B02-55FE-4BF1-8607-A0D703E61055" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a70:*:*:*:*:*:*:*:*", + "matchCriteriaId": "532FE51E-41FA-4BFF-81E6-4A6B2666F6F8" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a90_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "550C1E38-56A3-4676-9D28-D66F66BA2FC8" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a90:*:*:*:*:*:*:*:*", + "matchCriteriaId": "E0DD2BF6-0943-48C4-BB63-840FC7F0376D" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "FDD92BFA-9117-4E6E-A13F-ED064B4B7284" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a700s:*:*:*:*:*:*:*:*", + "matchCriteriaId": "C17EF8C9-E728-49BC-890A-4C987781E0F2" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4E73901F-666D-4D8B-BDFD-93DD2F70C74B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:8300:*:*:*:*:*:*:*:*", + "matchCriteriaId": "440F1F15-8BCC-4B14-9E90-210F78BD02DC" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "34B25BEF-8708-4E2C-8BA6-EBCD5267EB04" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:8700:*:*:*:*:*:*:*:*", + "matchCriteriaId": "E0B19AB1-1441-4856-BA7D-2E8000E8FCE4" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "04E3BD77-8915-4FFC-8483-5DB5D610F829" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a400:*:*:*:*:*:*:*:*", + "matchCriteriaId": "6D8DFFE9-2772-4B12-8962-750DF24A352E" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9AC7AD92-8B33-4137-A4EC-08641E4AF857" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:c400:*:*:*:*:*:*:*:*", + "matchCriteriaId": "8FA5EA99-2F44-4CEE-A0B7-673C4F8287C9" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a320_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6ADE5E80-06D3-4A1B-A655-FBB6CCA03939" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a320:*:*:*:*:*:*:*:*", + "matchCriteriaId": "2E0A1CB1-3A0C-4ED5-B72C-FDA0085BBD40" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a800_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B36CECA5-4545-49C2-92EB-B739407B207F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a800:*:*:*:*:*:*:*:*", + "matchCriteriaId": "5FE69B5A-CFC0-470E-9846-7D8086814986" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:c800_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B5AE3364-DB2D-4543-B1E2-175BF8BEBEE7" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:c800:*:*:*:*:*:*:*:*", + "matchCriteriaId": "11E837C7-F91E-4486-B0FD-3222E69AB17D" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a900_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "93B9B933-7D69-4B33-8983-C1CEC000B38B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a900:*:*:*:*:*:*:*:*", + "matchCriteriaId": "048F04A2-5630-453A-A855-E9314B2BAB62" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:9500_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "866CB169-576D-4ED7-AB9A-2C01D60C26D6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:9500:*:*:*:*:*:*:*:*", + "matchCriteriaId": "27E91650-A0AF-43BF-985D-7F89D8E8CD31" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:c190_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "75A43965-CB2E-4C28-AFC3-1ADE7A6B845C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:c190:*:*:*:*:*:*:*:*", + "matchCriteriaId": "8D3202DD-7616-4C9E-AFA1-61A1311F6C42" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a150_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "775078AE-16E0-4AF6-9022-372FC2852107" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a150:*:*:*:*:*:*:*:*", + "matchCriteriaId": "23BA50E9-44A7-4443-AAE7-59911BB24EFE" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a220_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4F2D2745-242C-4603-899E-70C9025BDDD2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a220:*:*:*:*:*:*:*:*", + "matchCriteriaId": "92AFCF5D-1291-4E75-A12B-B95BBDAC3440" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:fas2720_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B7FD1DA9-7980-4643-B378-7095892DA176" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:fas2720:*:*:*:*:*:*:*:*", + "matchCriteriaId": "9C227886-9186-49C3-A2B1-A0C1D5E5705A" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:fas2750_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "AD661062-0D5B-4671-9D92-FEF8D7395C1E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:fas2750:*:*:*:*:*:*:*:*", + "matchCriteriaId": "50B5C295-3711-4002-9D6D-72B6A237F650" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:fas2820_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F997DB9A-AF66-4CE1-B33B-A04493ECBA19" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:fas2820:*:*:*:*:*:*:*:*", + "matchCriteriaId": "22D33DD7-EB3F-4B85-B9F8-1D744112C9E0" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a300_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "1EE722F0-28D5-4CDF-BC5C-A8BFB7C7AAC0" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a300:*:*:*:*:*:*:*:*", + "matchCriteriaId": "87D745CD-4CA7-415D-8956-04A684E2DED3" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:8200_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9AE9B08F-817F-45B8-B916-442DBA7D329D" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:8200:*:*:*:*:*:*:*:*", + "matchCriteriaId": "711BE662-6254-4C16-8494-1B6CC032E14A" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a700_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "5B503CC9-E849-43AB-81E4-0F060997189F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a700:*:*:*:*:*:*:*:*", + "matchCriteriaId": "8E931F61-407F-4FF3-B5D6-74DEF7D06383" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:9000_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6A220780-3C67-4157-A335-65AAA6513589" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:9000:*:*:*:*:*:*:*:*", + "matchCriteriaId": "0EF94E89-7597-4EDE-B02A-FFB799D19058" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "89612649-BACF-4FAC-9BA4-324724FD93A6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h610c:*:*:*:*:*:*:*:*", + "matchCriteriaId": "3A2FDC2F-BC6C-4845-BF4F-572B7A1432C6" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "FD7CFE0E-9D1E-4495-B302-89C3096FC0DF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h610s:*:*:*:*:*:*:*:*", + "matchCriteriaId": "80A6BDDA-17BE-4EE5-BEFC-F24235A3C9F3" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "5921A877-18BF-43FE-915C-D226E140ACFC" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h615c:*:*:*:*:*:*:*:*", + "matchCriteriaId": "136641AA-7976-4F2D-8336-D75F440D2058" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0", + "versionEndIncluding": "11.70.2", + "matchCriteriaId": "8C5DA53D-744B-4087-AEA9-257F18949E4D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3ab0d6f8289ba8402ca95a9fc61a34909d5e1f3a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97eaa2955db4120ce6ec2ef123e860bc32232c50", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3f2c083cb575d80a7627baf3339e78fedccbb91", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7d6027790acea24446ddd6632d394096c0f4667", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dbc9b22d0ed319b4e29034ce0a3fe32a3ee2c587", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f119f2325ba70cbfdec701000dcad4d88805d5b0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ab0d6f8289ba8402ca95a9fc61a34909d5e1f3a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97eaa2955db4120ce6ec2ef123e860bc32232c50", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a3f2c083cb575d80a7627baf3339e78fedccbb91", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7d6027790acea24446ddd6632d394096c0f4667", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dbc9b22d0ed319b4e29034ce0a3fe32a3ee2c587", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f119f2325ba70cbfdec701000dcad4d88805d5b0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://security.netapp.com/advisory/ntap-20241101-0013/", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26735.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26735.json index 666d97fc050..797e9169e2f 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26735.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26735.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26735", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.147", - "lastModified": "2025-02-27T20:15:38.000", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:05:01.547", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,83 +15,486 @@ "value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: ipv6:sr: corrige posible use-after-free y null-ptr-deref La estructura de operaciones pernet para el subsystem debe registrarse antes de registrar la familia netlink gen\u00e9rica." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + }, + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.19.308", + "matchCriteriaId": "A59FADE0-1297-4295-833A-F3A857A9CDAC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.270", + "matchCriteriaId": "5D8044B1-C7E8-44A4-9F03-A4D7BCDB1721" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.211", + "matchCriteriaId": "7DDA4DCF-671D-415D-94DF-6E3C77DF0704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.150", + "matchCriteriaId": "CB6C60DE-9E0C-46C5-904D-D4F4031F8E95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "BA7850CE-97C9-4408-A348-6173296BCA2B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4E73901F-666D-4D8B-BDFD-93DD2F70C74B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:8300:*:*:*:*:*:*:*:*", + "matchCriteriaId": "440F1F15-8BCC-4B14-9E90-210F78BD02DC" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "34B25BEF-8708-4E2C-8BA6-EBCD5267EB04" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:8700:*:*:*:*:*:*:*:*", + "matchCriteriaId": "E0B19AB1-1441-4856-BA7D-2E8000E8FCE4" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "04E3BD77-8915-4FFC-8483-5DB5D610F829" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:a400:*:*:*:*:*:*:*:*", + "matchCriteriaId": "6D8DFFE9-2772-4B12-8962-750DF24A352E" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9AC7AD92-8B33-4137-A4EC-08641E4AF857" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:c400:*:*:*:*:*:*:*:*", + "matchCriteriaId": "8FA5EA99-2F44-4CEE-A0B7-673C4F8287C9" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "89612649-BACF-4FAC-9BA4-324724FD93A6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h610c:*:*:*:*:*:*:*:*", + "matchCriteriaId": "3A2FDC2F-BC6C-4845-BF4F-572B7A1432C6" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "FD7CFE0E-9D1E-4495-B302-89C3096FC0DF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h610s:*:*:*:*:*:*:*:*", + "matchCriteriaId": "80A6BDDA-17BE-4EE5-BEFC-F24235A3C9F3" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "5921A877-18BF-43FE-915C-D226E140ACFC" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h615c:*:*:*:*:*:*:*:*", + "matchCriteriaId": "136641AA-7976-4F2D-8336-D75F440D2058" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0", + "versionEndIncluding": "11.70.2", + "matchCriteriaId": "8C5DA53D-744B-4087-AEA9-257F18949E4D" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/02b08db594e8218cfbc0e4680d4331b457968a9b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5559cea2d5aa3018a5f00dd2aca3427ba09b386b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65c38f23d10ff79feea1e5d50b76dc7af383c1e6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/82831e3ff76ef09fb184eb93b79a3eb3fb284f1d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8391b9b651cfdf80ab0f1dc4a489f9d67386e197", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91b020aaa1e59bfb669d34c968e3db3d5416bcee", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/953f42934533c151f440cd32390044d2396b87aa", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e02973dbc6a91e40aa4f5d87b8c47446fbfce44", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://security.netapp.com/advisory/ntap-20241101-0012/", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26736.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26736.json index 16ae8cc22de..155ca15d593 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26736.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26736.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26736", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.197", - "lastModified": "2024-11-21T09:02:57.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:03:20.093", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,67 +15,241 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: afs: aumenta el tama\u00f1o del b\u00fafer en afs_update_volume_status() La longitud m\u00e1xima del volumen->valor vid es de 20 caracteres. Por lo tanto, aumente el tama\u00f1o de idbuf[] hasta 24 para evitar el desbordamiento. Encontrado por el Centro de verificaci\u00f3n de Linux (linuxtesting.org) con SVACE. [DH: En realidad, es 20 + NUL, as\u00ed que aum\u00e9ntalo a 24 y usa snprintf()]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "5.4.270", + "matchCriteriaId": "D32D405A-158E-4E9C-AB2F-3F06B8855AF5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.211", + "matchCriteriaId": "7DDA4DCF-671D-415D-94DF-6E3C77DF0704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.150", + "matchCriteriaId": "CB6C60DE-9E0C-46C5-904D-D4F4031F8E95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "BA7850CE-97C9-4408-A348-6173296BCA2B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e6065dd25b661420fac19c34282b6c626fcd35e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d34a5e57632bb5ff825196ddd9a48ca403626dfa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9b5e2b7a8196850383c70d099bfd39e81ab6637", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e56662160fc24d28cb75ac095cc6415ae1bda43e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8530b170e464017203e3b8c6c49af6e916aece1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e6065dd25b661420fac19c34282b6c626fcd35e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d34a5e57632bb5ff825196ddd9a48ca403626dfa", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9b5e2b7a8196850383c70d099bfd39e81ab6637", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e56662160fc24d28cb75ac095cc6415ae1bda43e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8530b170e464017203e3b8c6c49af6e916aece1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26740.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26740.json index 5bba8d9db28..65ede3ed9de 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26740.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26740.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26740", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.410", - "lastModified": "2024-11-21T09:02:57.653", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:03:33.700", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,135 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net/sched: act_mirred: use el trabajo pendiente para el ingreso duplicado. La prueba que Davide agreg\u00f3 en el compromiso ca22da2fbd69 (\"act_mirred: use el trabajo pendiente para llamadas anidadas para el ingreso duplicado\") bloquea nuestras m\u00e1quinas virtuales de prueba. aproximadamente cada 10 ejecuciones, con el conocido punto muerto tcp_v4_rcv -> tcp_v4_rcv informado por lockdep. El problema descrito anteriormente por Davide (ver Enlace) es que si invertimos el flujo de tr\u00e1fico con la redirecci\u00f3n (salida -> entrada) podemos llegar al mismo socket que gener\u00f3 el paquete. Y es posible que todav\u00eda estemos sosteniendo el bloqueo del enchufe. La soluci\u00f3n com\u00fan a estos puntos muertos es colocar el paquete en el trabajo pendiente de Rx, en lugar de ejecutar la ruta de Rx en l\u00ednea. Haga eso para todas las reversiones de salida -> entrada, no solo una vez que comenzamos a anidar llamadas reflejadas. En el pasado, exist\u00eda la preocupaci\u00f3n de que la direcci\u00f3n indirecta del trabajo pendiente provocara la p\u00e9rdida de informes de errores o estad\u00edsticas menos precisas. Pero la soluci\u00f3n actual no parece solucionar el problema." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "B5C84E54-75C3-403F-84B4-D99BD4F89D01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/52f671db18823089a02f07efc04efdb2272ddc17", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/60ddea1600bc476e0f5e02bce0e29a460ccbf0be", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7c787888d164689da8b1b115f3ef562c1e843af4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/52f671db18823089a02f07efc04efdb2272ddc17", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/60ddea1600bc476e0f5e02bce0e29a460ccbf0be", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7c787888d164689da8b1b115f3ef562c1e843af4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26741.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26741.json index 6d9e635b133..15fe4291600 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26741.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26741.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26741", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.457", - "lastModified": "2024-11-21T09:02:57.780", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:03:52.647", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,156 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dccp/tcp: Unhash sk de ehash para error de asignaci\u00f3n de tb2 despu\u00e9s de check_estalblished(). syzkaller inform\u00f3 una advertencia [0] en inet_csk_destroy_sock() sin reproducci\u00f3n. WARN_ON(inet_sk(sk)->inet_num && !inet_csk(sk)->icsk_bind_hash); Sin embargo, el registro del syzkaller insinu\u00f3 que connect() fall\u00f3 justo antes de la advertencia debido a FAULT_INJECTION. [1] Cuando se llama a connect() para un socket independiente, buscamos un puerto ef\u00edmero disponible. Si existe un dep\u00f3sito bhash para el puerto, llamamos a __inet_check_establecido() o __inet6_check_establecido() para verificar si el dep\u00f3sito es reutilizable. Si es reutilizable, agregamos el socket en ehash y configuramos inet_sk(sk)->inet_num. Luego, buscamos el dep\u00f3sito bhash2 correspondiente e intentamos asignarlo si no existe. Aunque rara vez ocurre en el uso real, si la asignaci\u00f3n falla, debemos revertir los cambios mediante check_establecido(). De lo contrario, un enchufe desconectado podr\u00eda ocupar ilegalmente una entrada ehash. Tenga en cuenta que no volvemos a colocar tw en ehash porque es posible que sk ya haya respondido a un paquete para tw y ser\u00eda mejor liberar tw antes bajo tal presi\u00f3n de memoria. [0]: ADVERTENCIA: CPU: 0 PID: 350830 en net/ipv4/inet_connection_sock.c:1193 inet_csk_destroy_sock (net/ipv4/inet_connection_sock.c:1193) M\u00f3dulos vinculados en: Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996 ), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 01/04/2014 RIP: 0010:inet_csk_destroy_sock (net/ipv4/inet_connection_sock.c:1193) C\u00f3digo: 41 5c 41 5d 41 5e e9 2d 4a 3d fd e8 28 4a 3d fd 48 89 ef e8 f0 cd 7d ff 5b 5d 41 5c 41 5d 41 5e e9 13 4a 3d fd e8 0e 4a 3d fd <0f> 0b e9 61 fe ff ff e8 02 4a 3d fd 4c 89 e 7 be 03 00 00 00 e8 05 RSP: 0018:ffffc9000b21fd38 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000009e78 RCX: ffffffff840bae40 RDX: ffff88806e 46c600 RSI: ffffffff840bb012 RDI: ffff88811755cca8 RBP: ffff88811755c880 R08: 0000000000000003 R09: 00000000000000000 R10: 0000000000009e78 R11: 00 00000000000000 R12: ffff88811755c8e0 R13: ffff88811755c892 R14: ffff88811755c918 R15: 0000000000000000 FS: 00007f03e5243800(0000) GS:ffff88811ae00000(0000) knl GS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32f21000 CR3: 0000000112ffe001 CR4: 0000000000770ef0 PKRU: 5555 Llamada 5554 Seguimiento: ? inet_csk_destroy_sock (net/ipv4/inet_connection_sock.c:1193) dccp_close (net/dccp/proto.c:1078) inet_release (net/ipv4/af_inet.c:434) __sock_release (net/socket.c:660) sock_close (net/ socket.c:1423) __fput (fs/file_table.c:377) __fput_sync (fs/file_table.c:462) __x64_sys_close (fs/open.c:1557 fs/open.c:1539 fs/open.c:1539) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) Entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) RIP: 0033:0x7f03e53852bb C\u00f3digo: 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 43 c9 f5 ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 3 5 44 89 c7 89 44 24 0c e8 a1 c9 f5 ff 8b 44 RSP: 002b:00000000005dfba0 EFLAGS: 00000293 ORIG_RAX: 00000000000000003 RAX: ffffffffffffffda RBX: 00000000000000004 RCX: 00007f03e53852bb RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000003 RBP: 000000000000000000 R08: 0000000000000000 R09: 000000000000167c R10: 0000000008a79680 R11: 0000000000000293 R12: 00007f03e4e43000 R13: 00007f03e4e43170 R14: 00007f03e4e43178 R15: 00007f03e4e431 70 [1]: FAULT_INJECTION: forzando un fallo. nombre failslab, intervalo 1, probabilidad 0, espacio 0, tiempos 0 CPU: 0 PID: 350833 Comm: syz-executor.1 No contaminado 6.7.0-12272-g2121c43f88f5 #9 Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996 ), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 01/04/2014 Seguimiento de llamadas: dump_stack_lvl---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "70C1DEAC-49D8-4948-B677-7129AE78D5BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/334a8348b2df26526f3298848ad6864285592caf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/66b60b0c8c4a163b022a9f0ad6769b0fd3dc662f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/729bc77af438a6e67914c97f6f3d3af8f72c0131", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8c4a6b850882bc47aaa864b720c7a2ee3102f39", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/334a8348b2df26526f3298848ad6864285592caf", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/66b60b0c8c4a163b022a9f0ad6769b0fd3dc662f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/729bc77af438a6e67914c97f6f3d3af8f72c0131", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8c4a6b850882bc47aaa864b720c7a2ee3102f39", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26742.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26742.json index 527932294a4..7ce1a4f4844 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26742.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26742.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26742", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.517", - "lastModified": "2024-11-21T09:02:57.910", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:04:16.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,156 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: scsi: smartpqi: solucione enable_managed_interrupts Corrija el problema de registro de blk-mq con el par\u00e1metro del m\u00f3dulo enable_managed_interrupts habilitado. Cuando desactivamos el indicador PCI_IRQ_AFFINITY predeterminado, el controlador debe registrarse con blk-mq usando blk_mq_map_queues(). Actualmente, el controlador est\u00e1 llamando a blk_mq_pci_map_queues(), lo que genera un seguimiento de la pila y posiblemente un comportamiento indefinido. Seguimiento de pila: [7.860089] scsi host2: smartpqi [7.871934] ADVERTENCIA: CPU: 0 PID: 238 en block/blk-mq-pci.c:52 blk_mq_pci_map_queues+0xca/0xd0 [7.889231] M\u00f3dulos vinculados en: sd_mod t10_pi sg uas smartpqi (+) crc32c_intel scsi_transport_sas usb_storage dm_mirror dm_region_hash dm_log dm_mod ipmi_devintf ipmi_msghandler fusible [7.924755] CPU: 0 PID: 238 Comm: kworker/0:3 No contaminado 4.18.0-372.88.1.el8_6_smartpqi_test .x86_64 #1 [7.944336] Nombre del hardware: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 08/03/2022 [ 7.963026] Cola de trabajo: eventos work_for_cpu_fn [ 7.978275] RIP: 0010:blk_mq_pci_map_queues+0xca/0xd0 [ 7.978278] C\u00f3digo: 4 8 89 de 89 c7 e8 f6 0f 4f 00 3b 05 c4 b7 8e 01 72 e1 5b 31 c0 5d 41 5c 41 5d 41 5e 41 5f e9 7d df 73 00 31 c0 e9 76 df 73 00 <0f> 0b eb bc 90 90 0f 1f 44 00 00 41 5 7 49 89 y siguientes 41 56 41 55 41 54 [ 7.978280] RSP: 0018:ffffa95fc3707d50 EFLAGS: 00010216 [ 7.978283] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 000000 0000000010 [ 7.978284] RDX: 00000000000000004 RSI: 0000000000000000 RDI: ffff9190c32d4310 [ 7.978286] RBP: 0000000000000000 R08: ffffa95fc370 7d38 R09: ffff91929b81ac00 [ 7.978287] R10: 00000000000000001 R11: ffffa95fc3707ac0 R12: 00000000000000000 [ 7.978288] R13: ffff9190c32d4000 R14: 0 0000000ffffffff R15: ffff9190c4c950a8 [ 7.978290] FS: 0000000000000000(0000) GS:ffff9193efc00000(0000) knlGS:0000000000000000 [ 7.978292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [8.172814] CR2: 000055d11166c000 CR3: 00000002dae10002 CR4: 00000000007706f0 [8.172816] DR0: [ 8.172818] PKRU : 55555554 [8.172819] Seguimiento de llamadas: [8.172823] blk_mq_alloc_tag_set+0x12e/0x310 [8.264339] scsi_add_host_with_dma.cold.9+0x30/0x245 [8.279302] pqi_ctrl_init+0xacf/0 xc8e [smartpqi] [8.294085]? pqi_pci_probe+0x480/0x4c8 [smartpqi] [ 8.309015] pqi_pci_probe+0x480/0x4c8 [smartpqi] [ 8.323286] local_pci_probe+0x42/0x80 [ 8.337855] work_for_cpu_fn+0x16/0x20 [ 8.3 51193] proceso_one_work+0x1a7/0x360 [8.364462]? create_worker+0x1a0/0x1a0 [8.379252] work_thread+0x1ce/0x390 [8.392623]? create_worker+0x1a0/0x1a0 [8.406295] kthread+0x10a/0x120 [8.418428]? set_kthread_struct+0x50/0x50 [8.431532] ret_from_fork+0x1f/0x40 [8.444137] ---[ final de seguimiento 1bf0173d39354506 ]---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "B8605F7C-E895-4D29-908C-068AC7BB69F2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3c31b18a8dd8b7bf36af1cd723d455853b8f94fe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f5b15c15e6016efb3e14582d02cc4ddf57227df", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5761eb9761d2d5fe8248a9b719efc4d8baf1f24a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b9433b25cb06c415c9cb24782599649a406c8d6d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3c31b18a8dd8b7bf36af1cd723d455853b8f94fe", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f5b15c15e6016efb3e14582d02cc4ddf57227df", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5761eb9761d2d5fe8248a9b719efc4d8baf1f24a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b9433b25cb06c415c9cb24782599649a406c8d6d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26743.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26743.json index 587f1c14edd..9ffc1a1c60d 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26743.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26743.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26743", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.577", - "lastModified": "2024-11-21T09:02:58.037", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T15:44:46.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,59 +15,220 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/qedr: corrija el flujo de error qedr_create_user_qp Evite la siguiente advertencia asegur\u00e1ndose de liberar los recursos asignados en caso de que qedr_init_user_queue() falle. -----------[ cortar aqu\u00ed ]----------- ADVERTENCIA: CPU: 0 PID: 143192 en drivers/infiniband/core/rdma_core.c:874 uverbs_destroy_ufile_hw+0xcf/ 0xf0 [ib_uverbs] M\u00f3dulos vinculados en: tls target_core_user uio target_core_pscsi target_core_file target_core_iblock ib_srpt ib_srp scsi_transport_srp nfsd nfs_acl rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd Grace fscache netfs 8 021q garp mrp stp llc ext4 mbcache jbd2 opa_vnic ib_umad ib_ipoib sunrpc rdma_ucm ib_isert iscsi_target_mod target_core_mod ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_cm hfi1 intel_rapl_msr intel_rapl_common mgag200 qedr sb_edac drm_shmem_helper rdmavt x86_pkg_temp_thermal drm_kms_helper intel_powerclamp ib_uverbs coretemp i2c_algo_bit kvm_intel dell_wmi_descriptor ipmi_ssif sparse_keymap kvm ib_core rfkill syscopyarea sysfillrect video sysimgblt irqbypass ipmi_si ipmi_devintf fb_sys_fops rapl iTCO_wdt mxm_wmi iTCO_vendor_support intel_cstate pcspkr dcdbas intel_uncore ipmi_msghandler lpc_ich acpi_power_meter mei_me mei fusible drm xfs libcrc32c qede sd_mod ahci libahci t10_pi sg crct10dif_pclmul crc32_pclmul crc32c_intel qed libata tg3 ghash_clmulni_intel megaraid_sas crc8 wmi [\u00faltima descarga: ib_srpt] CPU: 0 PID: 143192 Comm: fi_rdm_tagged_p Kdump: cargado No contaminado 5.14.0-408.el 9.x86_64 #1 Nombre del hardware: Dell Inc. PowerEdge R430/03XKDV, BIOS 2.14.0 25/01/2022 RIP: 0010:uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs] C\u00f3digo: 5d 41 5c 41 5d 41 5e e9 0f 26 1b dd 48 89 df e8 67 6a ff ff 49 8b 86 10 01 00 00 48 85 c0 74 9c 4c 89 e7 e8 83 c0 cb dd eb 92 <0f> 0b eb be 0f 0b be 04 00 00 00 48 89 df e8 8e f5 ff ff e9 6d ff RSP: 0018:ffffb7c6cadfbc 60 EF BANDERAS: 00010286 RAX: ffff8f0889ee3f60 RBX: ffff8f088c1a5200 RCX: 00000000802a0016 RDX: 00000000802a0017 RSI: 00000000000000001 RDI: ffff8f0880042600 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 R10: ffff8f11fffd5000 R11: 00000000000039000 R12: ffff8f0d5b36cd80 R13: ff ff8f088c1a5250 R14: ffff8f1206d91000 R15: 0000000000000000 FS: 00000000000000000( 0000) GS:ffff8f11d7c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000147069200e20 CR3: 00000001c7 210002 CR4: 00000000001706f0 Seguimiento de llamadas: ? show_trace_log_lvl+0x1c4/0x2df? show_trace_log_lvl+0x1c4/0x2df? ib_uverbs_close+0x1f/0xb0 [ib_uverbs] ? uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs] ? __advertir+0x81/0x110 ? uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs] ? report_bug+0x10a/0x140? handle_bug+0x3c/0x70? exc_invalid_op+0x14/0x70? asm_exc_invalid_op+0x16/0x20? uverbs_destroy_ufile_hw+0xcf/0xf0 [ib_uverbs] ib_uverbs_close+0x1f/0xb0 [ib_uverbs] __fput+0x94/0x250 task_work_run+0x5c/0x90 do_exit+0x270/0x4a0 do_group_exit+0x2d/0x90 get_signal+0x8 7c/0x8c0 arch_do_signal_or_restart+0x25/0x100 ? ib_uverbs_ioctl+0xc2/0x110 [ib_uverbs] exit_to_user_mode_loop+0x9c/0x130 exit_to_user_mode_prepare+0xb6/0x100 syscall_exit_to_user_mode+0x12/0x40 do_syscall_64+0x69/0x90 ? syscall_exit_work+0x103/0x130? syscall_exit_to_user_mode+0x22/0x40? do_syscall_64+0x69/0x90? syscall_exit_work+0x103/0x130? syscall_exit_to_user_mode+0x22/0x40? do_syscall_64+0x69/0x90? do_syscall_64+0x69/0x90? common_interrupt+0x43/0xa0 Entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x1470abe3ec6b C\u00f3digo: no se puede acceder a los bytes del c\u00f3digo de operaci\u00f3n en RIP 0x1470abe3ec41. RSP: 002b:00007fff13ce9108 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: fffffffffffffffc RBX: 00007fff13ce9218 RCX: 00001470abe3ec6b RDX: 00007fff13ce9 200 RSI: 00000000c0181b01 RDI: 00000000000000004 RBP: 00007fff13ce91e0 R08: 0000558d9655da10 R09: 0000558d9655dd00 R10: 00007fff13ce95c0 R11: 0000000000000246 R12: 00007fff13ce9358 R13: 0000000000000013 R14: 0000558d9655db50 R15: 00007fff13ce9470 --[ final de seguimiento 888a9b92e04c5c97 ]--" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.11", + "versionEndExcluding": "5.10.211", + "matchCriteriaId": "858A15A4-A4B1-49AD-BE9F-0FF571CAA032" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.150", + "matchCriteriaId": "CB6C60DE-9E0C-46C5-904D-D4F4031F8E95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "BA7850CE-97C9-4408-A348-6173296BCA2B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/135e5465fefa463c5ec93c4eede48b9fedac894a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5639414a52a29336ffa1ede80a67c6d927acbc5a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5ba4e6d5863c53e937f49932dee0ecb004c65928", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f31a244c753aacf40b71d01f03ca6742f81bbbc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/95175dda017cd4982cd47960536fa1de003d3298", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bab8875c06ebda5e01c5c4cab30022aed85c14e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/135e5465fefa463c5ec93c4eede48b9fedac894a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5639414a52a29336ffa1ede80a67c6d927acbc5a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5ba4e6d5863c53e937f49932dee0ecb004c65928", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f31a244c753aacf40b71d01f03ca6742f81bbbc", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/95175dda017cd4982cd47960536fa1de003d3298", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bab8875c06ebda5e01c5c4cab30022aed85c14e6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26751.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26751.json index a0a7545211b..0b24a8a55fe 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26751.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26751.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26751", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.840", - "lastModified": "2024-11-21T09:02:59.333", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:57:25.003", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,75 +15,262 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ARM: ep93xx: Agregar terminador a gpiod_lookup_table Sin el terminador, si se pasa un con_id a gpio_find() que no existe en la tabla de b\u00fasqueda, la funci\u00f3n no dejar\u00e1 de repetirse correctamente y eventualmente causar\u00e1 un oops" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.308", + "matchCriteriaId": "4096B71A-70A0-4599-96CC-B333AC3428BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.270", + "matchCriteriaId": "5D8044B1-C7E8-44A4-9F03-A4D7BCDB1721" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.211", + "matchCriteriaId": "7DDA4DCF-671D-415D-94DF-6E3C77DF0704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.150", + "matchCriteriaId": "CB6C60DE-9E0C-46C5-904D-D4F4031F8E95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "BA7850CE-97C9-4408-A348-6173296BCA2B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6abe0895b63c20de06685c8544b908c7e413efa8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/70d92abbe29692a3de8697ae082c60f2d21ab482", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/786f089086b505372fb3f4f008d57e7845fff0d8", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97ba7c1f9c0a2401e644760d857b2386aa895997", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/999a8bb70da2946336327b4480824d1691cae1fa", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e200a06ae2abb321939693008290af32b33dd6e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eec6cbbfa1e8d685cc245cfd5626d0715a127a48", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fdf87a0dc26d0550c60edc911cda42f9afec3557", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26752.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26752.json index 7cb36f2a0d7..52aedca7cc7 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26752.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26752.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26752", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:51.910", - "lastModified": "2024-11-21T09:02:59.473", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:57:11.283", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,79 +15,279 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: l2tp: pasa la longitud correcta del mensaje a ip6_append_data l2tp_ip6_sendmsg necesita evitar tener en cuenta el encabezado de transporte dos veces al unir m\u00e1s datos en un skbuff ya parcialmente ocupado. Para gestionar esto, verificamos si skbuff contiene datos usando skb_queue_empty al decidir cu\u00e1ntos datos agregar usando ip6_append_data. Sin embargo, el c\u00f3digo que realiz\u00f3 el c\u00e1lculo era incorrecto: ulen = len + skb_queue_empty(&sk->sk_write_queue)? transhdrlen : 0; ...debido a la precedencia del operador C, esto termina configurando ulen en transhdrlen para mensajes con una longitud distinta de cero, lo que resulta en paquetes corruptos en el cable. Agregue par\u00e9ntesis para corregir el c\u00e1lculo de acuerdo con la intenci\u00f3n original." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-131" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.296", + "versionEndExcluding": "4.19.308", + "matchCriteriaId": "A9FA566F-70F7-425E-992C-8E288E08DC71" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.258", + "versionEndExcluding": "5.4.270", + "matchCriteriaId": "DB22468A-4B52-4E91-B35B-C94CAD2C78D0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.198", + "versionEndExcluding": "5.10.211", + "matchCriteriaId": "86A99ADE-C508-4FC9-962C-012F03BBCEC5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.135", + "versionEndExcluding": "5.15.150", + "matchCriteriaId": "097E59FD-F12D-4416-B356-2651F9C7AC68" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.57", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "894FCF87-4C78-4DCF-9C4A-D8918A518E66" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "67629862-377E-46FA-A747-4A0BC6C42DD8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.14.327:*:*:*:*:*:*:*", + "matchCriteriaId": "C403DCDD-EFA8-403C-9134-6C69953B8199" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5.7:*:*:*:*:*:*:*", + "matchCriteriaId": "E0044DD2-D5B3-491C-B153-351DE4C1E042" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", + "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0da15a70395182ee8cb75716baf00dddc0bea38d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13cd1daeea848614e585b2c6ecc11ca9c8ab2500", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/359e54a93ab43d32ee1bff3c2f9f10cb9f6b6e79", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4c3ce64bc9d36ca9164dd6c77ff144c121011aae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/804bd8650a3a2bf3432375f8c97d5049d845ce56", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/83340c66b498e49353530e41542500fc8a4782d6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c1d3a84a67db910ce28a871273c992c3d7f9efb5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dcb4d14268595065c85dc5528056713928e17243", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0da15a70395182ee8cb75716baf00dddc0bea38d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13cd1daeea848614e585b2c6ecc11ca9c8ab2500", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/359e54a93ab43d32ee1bff3c2f9f10cb9f6b6e79", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4c3ce64bc9d36ca9164dd6c77ff144c121011aae", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/804bd8650a3a2bf3432375f8c97d5049d845ce56", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/83340c66b498e49353530e41542500fc8a4782d6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c1d3a84a67db910ce28a871273c992c3d7f9efb5", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dcb4d14268595065c85dc5528056713928e17243", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26756.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26756.json index e7ddb88b4f5..9af6333ff30 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26756.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26756.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26756", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:52.150", - "lastModified": "2024-11-21T09:03:00.037", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:56:57.017", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,114 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: md: No registre sync_thread para remodelar directamente Actualmente, si se interrumpe el proceso de remodelaci\u00f3n, volver a ensamblar la matriz registrar\u00e1 sync_thread directamente desde pers->run(), en este caso 'MD_RECOVERY_RUNNING ' se configura directamente, sin embargo, no hay garant\u00eda de que md_do_sync() se ejecute, por lo tanto, stop_sync_thread() se bloquear\u00e1 porque 'MD_RECOVERY_RUNNING' no se puede borrar. En el \u00faltimo parche, aseg\u00farese de que md_do_sync() establezca MD_RECOVERY_DONE; sin embargo, dm-raid test shell/lvconvert-raid-reshape.sh ocasionalmente puede activar el siguiente bloqueo: [root@fedora ~]# cat /proc/1982/stack [<0>] stop_sync_thread+0x1ab/0x270 [md_mod] [<0>] md_frozen_sync_thread+0x5c/0xa0 [md_mod] [<0>] raid_presuspend+0x1e/0x70 [dm_raid] [<0>] dm_table_presuspend_targets+0x40/0xb0 [ dm_mod] [<0>] __dm_destroy+0x2a5/0x310 [dm_mod] [<0>] dm_destroy+0x16/0x30 [dm_mod] [<0>] dev_remove+0x165/0x290 [dm_mod] [<0>] ctl_ioctl+0x4bb/ 0x7b0 [dm_mod] [<0>] dm_ctl_ioctl+0x11/0x20 [dm_mod] [<0>] vfs_ioctl+0x21/0x60 [<0>] __x64_sys_ioctl+0xb9/0xe0 [<0>] do_syscall_64+0xc6/0x230 [<0 >] Entry_SYSCALL_64_after_hwframe+0x6c/0x74 Mientras tanto mddev->recovery es: MD_RECOVERY_RUNNING | MD_RECOVERY_INTR | MD_RECOVERY_RESHAPE | MD_RECOVERY_FROZEN Solucione este problema eliminando el c\u00f3digo para registrar sync_thread directamente desde raid10 y raid5. Y deje que md_check_recovery() registre sync_thread." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-459" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.17", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "4B40F459-8AC4-4B7B-A429-8F308610CEBF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/13b520fb62b772e408f9b79c5fe18ad414e90417", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ad39c08186f8a0f221337985036ba86731d6aafe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13b520fb62b772e408f9b79c5fe18ad414e90417", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ad39c08186f8a0f221337985036ba86731d6aafe", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26759.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26759.json index 01abda442b0..ddbfcd66161 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26759.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26759.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26759", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:52.320", - "lastModified": "2024-11-21T09:03:00.527", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:56:49.890", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,156 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/swap: corrige la ejecuci\u00f3n al omitir swapcache Al omitir swapcache para SWP_SYNCHRONOUS_IO, si dos o m\u00e1s subprocesos intercambian la misma entrada al mismo tiempo, obtienen p\u00e1ginas diferentes (A, B) . Antes de que un subproceso (T0) finalice el intercambio e instale la p\u00e1gina (A) en el PTE, otro subproceso (T1) podr\u00eda finalizar el intercambio de la p\u00e1gina (B), liberar la entrada y luego intercambiar la p\u00e1gina posiblemente modificada reutilizando la misma entrada. Rompe el control pte_same (T0) porque el valor de PTE no cambia, lo que provoca un problema de ABA. El subproceso (T0) instalar\u00e1 una p\u00e1gina bloqueada (A) en el PTE y provocar\u00e1 da\u00f1os en los datos. Una posible pila de llamadas es as\u00ed: CPU0 CPU1 ---- ---- do_swap_page() do_swap_page() con la misma entrada swap_read_folio() < - leer en la p\u00e1gina A swap_read_folio() <- leer en la p\u00e1gina B ... set_pte_at() swap_free() <- la entrada es libre pte_same() <- Verificar pase, PTE parece no haber cambiado, \u00a1pero la p\u00e1gina A est\u00e1 estancada! swap_free() <- \u00a1Contenido de la p\u00e1gina B perdido! set_pte_at() <- \u00a1p\u00e1gina A obsoleta instalada! Y adem\u00e1s, para ZRAM, swap_free() permite que el dispositivo de intercambio descarte el contenido de la entrada, por lo que incluso si la p\u00e1gina (B) no se modifica, si swap_read_folio() en CPU0 ocurre m\u00e1s tarde que swap_free() en CPU1, tambi\u00e9n puede causar que los datos p\u00e9rdida. Para solucionar este problema, reutilice swapcache_prepare, que fijar\u00e1 la entrada de intercambio usando el indicador de cach\u00e9 y permitir\u00e1 que solo un hilo la intercambie, y tambi\u00e9n evitar\u00e1 que cualquier c\u00f3digo paralelo coloque la entrada en el cach\u00e9. Suelte el pasador despu\u00e9s de desbloquear el PT. Los corredores simplemente dan vueltas y esperan, ya que es un evento raro y muy corto. Se agrega una llamada Schedule_timeout_uninterruptible(1) para evitar errores repetidos de p\u00e1gina que desperdician demasiada CPU, provocando bloqueos en vivo o agregando demasiado ruido a las estad\u00edsticas de rendimiento. Un problema similar de livelock se describi\u00f3 en el compromiso 029c4628b2eb (\"mm: swap: deshacerse de livelock en swapin readahead\") Reproductor: este problema de ejecuci\u00f3n se puede activar f\u00e1cilmente utilizando un reproductor bien construido y un brd parcheado (con un retraso en la ruta de lectura) [ 1]: Con la \u00faltima l\u00ednea principal 6.8, la p\u00e9rdida de datos causada por la ejecuci\u00f3n se puede observar f\u00e1cilmente: $ gcc -g -lpthread test-thread-swap-race.c && ./a.out Contaminando 32 MB de regi\u00f3n de memoria... Siga intercambiando. .. Comenzando la ronda 0... Generando 65536 trabajadores... Se generaron 32746 trabajadores, espere a que termine... Ronda 0: Error en 0x5aa00, se esperaban 32746, obtuve 32743, \u00a13 p\u00e9rdida de datos! Ronda 0: Error en 0x395200, se esperaba 32746, obtuve 32743, \u00a13 p\u00e9rdida de datos! Ronda 0: Error en 0x3fd000, esperado 32746, obtuve 32737, \u00a19 p\u00e9rdida de datos! Ronda 0 fallida, \u00a115 p\u00e9rdida de datos! Este reproductor genera m\u00faltiples subprocesos que comparten la misma regi\u00f3n de memoria mediante un peque\u00f1o dispositivo de intercambio. Cada dos subprocesos actualiza las p\u00e1ginas asignadas una por una en direcci\u00f3n opuesta tratando de crear una ejecuci\u00f3n, con un subproceso dedicado sigue intercambiando los datos usando madvise. El reproductor cre\u00f3 una tasa de reproducci\u00f3n de aproximadamente una vez cada 5 minutos, por lo que la ejecuci\u00f3n deber\u00eda ser totalmente posible en producci\u00f3n. Despu\u00e9s de este parche, ejecut\u00e9 el reproductor durante m\u00e1s de unos cientos de rondas y no se observ\u00f3 p\u00e9rdida de datos. ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "1D4BFAE6-78E1-4617-99B6-12994681E95C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/13ddaf26be324a7f951891ecd9ccd04466d27458", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2dedda77d4493f3e92e414b272bfa60f1f51ed95", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/305152314df82b22cf9b181f3dc5fc411002079a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d183a4631acfc7af955c02a02e739cec15f5234d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13ddaf26be324a7f951891ecd9ccd04466d27458", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2dedda77d4493f3e92e414b272bfa60f1f51ed95", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/305152314df82b22cf9b181f3dc5fc411002079a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d183a4631acfc7af955c02a02e739cec15f5234d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-267xx/CVE-2024-26761.json b/CVE-2024/CVE-2024-267xx/CVE-2024-26761.json index fab14ca8b6d..c0390de355b 100644 --- a/CVE-2024/CVE-2024-267xx/CVE-2024-26761.json +++ b/CVE-2024/CVE-2024-267xx/CVE-2024-26761.json @@ -2,8 +2,8 @@ "id": "CVE-2024-26761", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-04-03T17:15:52.413", - "lastModified": "2024-11-21T09:03:00.763", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:56:39.690", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,156 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: cxl/pci: corrige la desactivaci\u00f3n de la memoria si el rango DVSEC CXL no coincide con una ventana CFMWS. El subSYSTEM Linux CXL se basa en el supuesto de que HPA == SPA. Es decir, la direcci\u00f3n f\u00edsica del host (HPA) con la que est\u00e1n programados los registros del decodificador HDM son direcciones f\u00edsicas del SYSTEM (SPA). Durante la configuraci\u00f3n del decodificador HDM, los registros de rango DVSEC CXL (cxl-3.1, 8.1.3.8) se verifican si la memoria est\u00e1 habilitada y el rango CXL est\u00e1 en una ventana HPA que se describe en una estructura CFMWS del puente de host CXL (cxl- 3.1, 9.18.1.3). Ahora, si el HPA no es un SPA, el rango CXL no coincide con una ventana CFMWS y el rango de memoria CXL se desactivar\u00e1 en ese momento. El descodificador HDM deja de funcionar, lo que provoca que la memoria del SYSTEM se desactive y, adem\u00e1s, el SYSTEM se cuelgue durante la inicializaci\u00f3n del descodificador HDM, normalmente cuando se inicia un kernel habilitado para CXL. Evite que el SYSTEM se cuelgue y no desactive el decodificador HDM si el rango CXL del decodificador no se encuentra en una ventana CFMWS. Tenga en cuenta que el cambio solo soluciona un problema de hardware, pero no implementa la traducci\u00f3n HPA/SPA. Se puede agregar soporte para esto en una serie de parches de seguimiento." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.1.80", + "matchCriteriaId": "6C87F3F9-DEA3-4634-9011-9F66B4796842" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.19", + "matchCriteriaId": "8D82004C-B2AE-4048-9344-32EFF65953B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.7", + "matchCriteriaId": "575EE16B-67F2-4B5B-B5F8-1877715C898B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*", + "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*", + "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*", + "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/031217128990d7f0ab8c46db1afb3cf1e075fd29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0cab687205986491302cd2e440ef1d253031c221", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2cc1a530ab31c65b52daf3cb5d0883c8b614ea69", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3a3181a71935774bda2398451256d7441426420b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/031217128990d7f0ab8c46db1afb3cf1e075fd29", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0cab687205986491302cd2e440ef1d253031c221", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2cc1a530ab31c65b52daf3cb5d0883c8b614ea69", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3a3181a71935774bda2398451256d7441426420b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-273xx/CVE-2024-27387.json b/CVE-2024/CVE-2024-273xx/CVE-2024-27387.json index eea31bd274f..a5edd9a9c51 100644 --- a/CVE-2024/CVE-2024-273xx/CVE-2024-27387.json +++ b/CVE-2024/CVE-2024-273xx/CVE-2024-27387.json @@ -2,8 +2,8 @@ "id": "CVE-2024-27387", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-09T20:15:04.740", - "lastModified": "2024-09-11T15:23:58.743", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:21.177", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -69,6 +69,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-276xx/CVE-2024-27659.json b/CVE-2024/CVE-2024-276xx/CVE-2024-27659.json index fa091343686..cc09e6de3af 100644 --- a/CVE-2024/CVE-2024-276xx/CVE-2024-27659.json +++ b/CVE-2024/CVE-2024-276xx/CVE-2024-27659.json @@ -2,8 +2,8 @@ "id": "CVE-2024-27659", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-29T20:15:41.687", - "lastModified": "2024-11-21T09:04:51.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:06:46.313", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,14 +71,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-823g_firmware:1.0.2b05:*:*:*:*:*:*:*", + "matchCriteriaId": "14A8546A-7F37-43D2-AD1E-DF65C6734057" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-823g:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "EF303ADD-7BAC-4D2A-B644-D03B23F76DDB" + } + ] + } + ] + } + ], "references": [ { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42B4C4-dfeae31d711f414796e1d9eb9cea7d31?pvs=4", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42B4C4-dfeae31d711f414796e1d9eb9cea7d31?pvs=4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-276xx/CVE-2024-27660.json b/CVE-2024/CVE-2024-276xx/CVE-2024-27660.json index 22aff2affdb..9d3fd230d73 100644 --- a/CVE-2024/CVE-2024-276xx/CVE-2024-27660.json +++ b/CVE-2024/CVE-2024-276xx/CVE-2024-27660.json @@ -2,8 +2,8 @@ "id": "CVE-2024-27660", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-29T20:15:41.730", - "lastModified": "2024-11-21T09:04:51.933", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:06:32.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,14 +71,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-823g_firmware:1.0.2b05:*:*:*:*:*:*:*", + "matchCriteriaId": "14A8546A-7F37-43D2-AD1E-DF65C6734057" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-823:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "166B8C1C-B2D0-4D28-B2E8-D0F9B688455A" + } + ] + } + ] + } + ], "references": [ { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x41C708-e46f864c48114f45894f4563588d7968?pvs=4", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x41C708-e46f864c48114f45894f4563588d7968?pvs=4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-276xx/CVE-2024-27661.json b/CVE-2024/CVE-2024-276xx/CVE-2024-27661.json index 6d8732f5499..db0730f5fc4 100644 --- a/CVE-2024/CVE-2024-276xx/CVE-2024-27661.json +++ b/CVE-2024/CVE-2024-276xx/CVE-2024-27661.json @@ -2,8 +2,8 @@ "id": "CVE-2024-27661", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-29T20:15:41.773", - "lastModified": "2024-11-21T09:04:52.157", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:06:18.090", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,14 +71,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-823g_firmware:1.0.2b05:*:*:*:*:*:*:*", + "matchCriteriaId": "14A8546A-7F37-43D2-AD1E-DF65C6734057" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-823g:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "EF303ADD-7BAC-4D2A-B644-D03B23F76DDB" + } + ] + } + ] + } + ], "references": [ { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42444C-34458f12482346b291f334eea12e6fd0?pvs=4", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42444C-34458f12482346b291f334eea12e6fd0?pvs=4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-276xx/CVE-2024-27662.json b/CVE-2024/CVE-2024-276xx/CVE-2024-27662.json index 43fc56937d5..a856ef48cf1 100644 --- a/CVE-2024/CVE-2024-276xx/CVE-2024-27662.json +++ b/CVE-2024/CVE-2024-276xx/CVE-2024-27662.json @@ -2,8 +2,8 @@ "id": "CVE-2024-27662", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-29T20:15:41.817", - "lastModified": "2024-11-21T09:04:52.400", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:56:03.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -40,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-755" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,14 +81,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-823g_firmware:1.0.2b05:*:*:*:*:*:*:*", + "matchCriteriaId": "14A8546A-7F37-43D2-AD1E-DF65C6734057" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-823g_firmware:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "46DBB19B-66FC-4AC6-9660-481786513427" + } + ] + } + ] + } + ], "references": [ { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x4116F0-5befc4a65457482c8c4dcb16910ab820?pvs=4", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x4116F0-5befc4a65457482c8c4dcb16910ab820?pvs=4", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-278xx/CVE-2024-27838.json b/CVE-2024/CVE-2024-278xx/CVE-2024-27838.json index 913b25caa63..1cee5de733a 100644 --- a/CVE-2024/CVE-2024-278xx/CVE-2024-27838.json +++ b/CVE-2024/CVE-2024-278xx/CVE-2024-27838.json @@ -2,7 +2,7 @@ "id": "CVE-2024-27838", "sourceIdentifier": "product-security@apple.com", "published": "2024-06-10T21:15:51.240", - "lastModified": "2024-11-21T09:05:14.337", + "lastModified": "2025-03-17T15:15:40.557", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-294xx/CVE-2024-29461.json b/CVE-2024/CVE-2024-294xx/CVE-2024-29461.json index 6cf8cff12a8..3a2edd6a28a 100644 --- a/CVE-2024/CVE-2024-294xx/CVE-2024-29461.json +++ b/CVE-2024/CVE-2024-294xx/CVE-2024-29461.json @@ -2,7 +2,7 @@ "id": "CVE-2024-29461", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-12T14:15:07.597", - "lastModified": "2024-11-21T09:08:03.070", + "lastModified": "2025-03-17T16:15:21.387", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -39,6 +39,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], "references": [ { "url": "https://gist.github.com/ErodedElk/399a226905c574efe705e3bff77955e3", diff --git a/CVE-2024/CVE-2024-29xx/CVE-2024-2931.json b/CVE-2024/CVE-2024-29xx/CVE-2024-2931.json index c4186e6588f..820787716ef 100644 --- a/CVE-2024/CVE-2024-29xx/CVE-2024-2931.json +++ b/CVE-2024/CVE-2024-29xx/CVE-2024-2931.json @@ -2,8 +2,8 @@ "id": "CVE-2024-2931", "sourceIdentifier": "security@wordfence.com", "published": "2024-04-02T09:15:07.567", - "lastModified": "2025-03-04T22:15:36.563", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:40:51.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -71,30 +71,66 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wpfront:wpfront_user_role_editor:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "4.1.0", + "matchCriteriaId": "F4B833FE-C391-4A48-91C1-93C46C7B93C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://inky-knuckle-2c2.notion.site/WPFront-User-Role-Editor-Information-disclosure-7435b8340a004f5f8485cad375326b2c", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Product" + ] }, { "url": "https://plugins.trac.wordpress.org/changeset/3061241/wpfront-user-role-editor/trunk/includes/users/class-assign-migrate.php", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/078a0647-fc3a-436c-bf00-8776b16e66ff?source=cve", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://inky-knuckle-2c2.notion.site/WPFront-User-Role-Editor-Information-disclosure-7435b8340a004f5f8485cad375326b2c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Product" + ] }, { "url": "https://plugins.trac.wordpress.org/changeset/3061241/wpfront-user-role-editor/trunk/includes/users/class-assign-migrate.php", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/078a0647-fc3a-436c-bf00-8776b16e66ff?source=cve", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-310xx/CVE-2024-31013.json b/CVE-2024/CVE-2024-310xx/CVE-2024-31013.json index 92b003d84e8..47a428c1e07 100644 --- a/CVE-2024/CVE-2024-310xx/CVE-2024-31013.json +++ b/CVE-2024/CVE-2024-310xx/CVE-2024-31013.json @@ -2,7 +2,7 @@ "id": "CVE-2024-31013", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-03T04:15:12.907", - "lastModified": "2025-02-27T21:15:35.987", + "lastModified": "2025-03-17T16:15:21.610", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -15,7 +15,42 @@ "value": "Vulnerabilidad de Cross Site Scripting (XSS) en emlog versi\u00f3n Pro 2.3, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un payload manipulado en la parte inferior de la p\u00e1gina de inicio en el par\u00e1metro footer_info." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://github.com/emlog/emlog/issues/291", diff --git a/CVE-2024/CVE-2024-31xx/CVE-2024-3116.json b/CVE-2024/CVE-2024-31xx/CVE-2024-3116.json index 5457126ece4..3f229b7ca15 100644 --- a/CVE-2024/CVE-2024-31xx/CVE-2024-3116.json +++ b/CVE-2024/CVE-2024-31xx/CVE-2024-3116.json @@ -2,7 +2,7 @@ "id": "CVE-2024-3116", "sourceIdentifier": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "published": "2024-04-04T15:15:39.667", - "lastModified": "2025-03-14T17:15:45.840", + "lastModified": "2025-03-17T16:43:52.873", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -90,9 +90,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:pgadmin:pgadmin:*:*:*:*:*:postgresql:*:*", + "criteria": "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*", "versionEndIncluding": "8.4", - "matchCriteriaId": "7C4D6773-B7B4-41C2-AAC9-D53A9A4B3E70" + "matchCriteriaId": "0F68E8F5-C6D8-4769-B0C1-114B4B4FA421" } ] } diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32285.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32285.json index eaa9614958f..e6838b54654 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32285.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32285.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32285", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:08.740", - "lastModified": "2024-11-21T09:14:39.233", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:59:31.947", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formaddUserName.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formaddUserName.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32286.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32286.json index 29fb4ccb83f..4608238d4e8 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32286.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32286.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32286", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:08.793", - "lastModified": "2024-11-21T09:14:39.453", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:59:43.380", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromVirtualSer.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromVirtualSer.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32287.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32287.json index e4fa30fe804..97b518d1204 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32287.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32287.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32287", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:08.843", - "lastModified": "2024-11-21T09:14:39.680", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:59:52.717", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromqossetting.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromqossetting.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32288.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32288.json index cd4192fa770..fdd0c6b82ea 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32288.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32288.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32288", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:08.903", - "lastModified": "2024-11-21T09:14:39.897", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T16:00:01.127", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromwebExcptypemanFilter.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromwebExcptypemanFilter.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32290.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32290.json index f2cfea7a5f2..bfdb2694b3d 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32290.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32290.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32290", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:08.960", - "lastModified": "2024-11-21T09:14:40.117", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T16:00:09.727", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromAddressNat_page.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromAddressNat_page.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32291.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32291.json index e0b8561cb68..849e695d770 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32291.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32291.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32291", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:09.010", - "lastModified": "2024-11-21T09:14:40.337", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T16:00:18.163", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromNatlimit.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromNatlimit.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32292.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32292.json index a26e3e1bd8f..b86520852ea 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32292.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32292.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32292", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:09.063", - "lastModified": "2024-11-21T09:14:40.560", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T16:00:28.613", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formexecommand_cmdi.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/formexecommand_cmdi.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-322xx/CVE-2024-32293.json b/CVE-2024/CVE-2024-322xx/CVE-2024-32293.json index 0040467f4a5..7db700d9b82 100644 --- a/CVE-2024/CVE-2024-322xx/CVE-2024-32293.json +++ b/CVE-2024/CVE-2024-322xx/CVE-2024-32293.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32293", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T14:15:09.113", - "lastModified": "2024-11-21T09:14:40.783", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T16:00:37.433", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:w30e_firmware:1.0.1.25\\(633\\):*:*:*:*:*:*:*", + "matchCriteriaId": "535AF764-B5CF-44FA-89C6-2FDFFDCD0A32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:w30e:-:*:*:*:*:*:*:*", + "matchCriteriaId": "02FBE634-0D3F-4439-B4A6-F427C82967C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromDhcpListClient_page.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W30E/fromDhcpListClient_page.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-323xx/CVE-2024-32307.json b/CVE-2024/CVE-2024-323xx/CVE-2024-32307.json index 7c99e973c36..e4e3b4dc389 100644 --- a/CVE-2024/CVE-2024-323xx/CVE-2024-32307.json +++ b/CVE-2024/CVE-2024-323xx/CVE-2024-32307.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32307", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T13:15:08.340", - "lastModified": "2024-11-21T09:14:42.307", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:06:45.053", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:fh1205_firmware:2.0.0.7\\(775\\):*:*:*:*:*:*:*", + "matchCriteriaId": "706158B7-6114-4AA8-A1A0-BB24119A3264" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:fh1205:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7E92D910-72BB-443F-9927-1E72AC8C8C9B" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/fromWizardHandle.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/fromWizardHandle.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-323xx/CVE-2024-32313.json b/CVE-2024/CVE-2024-323xx/CVE-2024-32313.json index 8c053d1d811..e1fad4cff75 100644 --- a/CVE-2024/CVE-2024-323xx/CVE-2024-32313.json +++ b/CVE-2024/CVE-2024-323xx/CVE-2024-32313.json @@ -2,8 +2,8 @@ "id": "CVE-2024-32313", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-17T13:15:08.490", - "lastModified": "2024-11-21T09:14:43.203", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-03-17T15:07:03.243", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,53 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:fh1205_firmware:2.0.0.7\\(775\\):*:*:*:*:*:*:*", + "matchCriteriaId": "706158B7-6114-4AA8-A1A0-BB24119A3264" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:fh1205:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7E92D910-72BB-443F-9927-1E72AC8C8C9B" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formWanParameterSetting.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory", + "Broken Link" + ] }, { "url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formWanParameterSetting.md", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Exploit", + "Third Party Advisory", + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-355xx/CVE-2024-35519.json b/CVE-2024/CVE-2024-355xx/CVE-2024-35519.json index 9a87b7b6c7b..a9cbe32caa3 100644 --- a/CVE-2024/CVE-2024-355xx/CVE-2024-35519.json +++ b/CVE-2024/CVE-2024-355xx/CVE-2024-35519.json @@ -2,8 +2,8 @@ "id": "CVE-2024-35519", "sourceIdentifier": "cve@mitre.org", "published": "2024-10-14T22:15:03.543", - "lastModified": "2024-10-16T17:17:57.140", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:21.827", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -69,6 +69,16 @@ "value": "CWE-77" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-390xx/CVE-2024-39081.json b/CVE-2024/CVE-2024-390xx/CVE-2024-39081.json index dedc8d0c2c3..7e58cdf6117 100644 --- a/CVE-2024/CVE-2024-390xx/CVE-2024-39081.json +++ b/CVE-2024/CVE-2024-390xx/CVE-2024-39081.json @@ -2,8 +2,8 @@ "id": "CVE-2024-39081", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-18T14:15:19.757", - "lastModified": "2024-10-01T15:51:30.237", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:40.787", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.6, "impactScore": 2.5 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 4.2, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.6, + "impactScore": 2.5 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-294" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-294" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-407xx/CVE-2024-40778.json b/CVE-2024/CVE-2024-407xx/CVE-2024-40778.json index 840feafd585..b85f584f716 100644 --- a/CVE-2024/CVE-2024-407xx/CVE-2024-40778.json +++ b/CVE-2024/CVE-2024-407xx/CVE-2024-40778.json @@ -2,7 +2,7 @@ "id": "CVE-2024-40778", "sourceIdentifier": "product-security@apple.com", "published": "2024-07-29T23:15:11.527", - "lastModified": "2024-11-21T09:31:36.180", + "lastModified": "2025-03-17T16:15:22.020", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 } ] }, @@ -49,6 +69,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-408xx/CVE-2024-40846.json b/CVE-2024/CVE-2024-408xx/CVE-2024-40846.json index c280175df72..e89d2d5b9eb 100644 --- a/CVE-2024/CVE-2024-408xx/CVE-2024-40846.json +++ b/CVE-2024/CVE-2024-408xx/CVE-2024-40846.json @@ -2,8 +2,8 @@ "id": "CVE-2024-40846", "sourceIdentifier": "product-security@apple.com", "published": "2024-09-17T00:15:49.230", - "lastModified": "2024-09-24T15:56:04.193", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:22.280", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-417xx/CVE-2024-41720.json b/CVE-2024/CVE-2024-417xx/CVE-2024-41720.json index f166559f295..79ddb15bdda 100644 --- a/CVE-2024/CVE-2024-417xx/CVE-2024-41720.json +++ b/CVE-2024/CVE-2024-417xx/CVE-2024-41720.json @@ -2,8 +2,8 @@ "id": "CVE-2024-41720", "sourceIdentifier": "vultures@jpcert.or.jp", "published": "2024-08-05T05:15:39.637", - "lastModified": "2024-08-30T17:49:42.047", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:41.073", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.0, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-732" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-426xx/CVE-2024-42638.json b/CVE-2024/CVE-2024-426xx/CVE-2024-42638.json index 65cc3de08f1..afdc40cfd46 100644 --- a/CVE-2024/CVE-2024-426xx/CVE-2024-42638.json +++ b/CVE-2024/CVE-2024-426xx/CVE-2024-42638.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42638", "sourceIdentifier": "cve@mitre.org", "published": "2024-08-16T18:15:09.810", - "lastModified": "2024-09-11T12:53:03.987", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:41.303", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-798" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-798" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-428xx/CVE-2024-42812.json b/CVE-2024/CVE-2024-428xx/CVE-2024-42812.json index 9b5cabbe15a..b533c7f1a1c 100644 --- a/CVE-2024/CVE-2024-428xx/CVE-2024-42812.json +++ b/CVE-2024/CVE-2024-428xx/CVE-2024-42812.json @@ -2,8 +2,8 @@ "id": "CVE-2024-42812", "sourceIdentifier": "cve@mitre.org", "published": "2024-08-19T20:15:07.070", - "lastModified": "2024-10-10T20:18:11.100", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:22.480", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-120" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-441xx/CVE-2024-44182.json b/CVE-2024/CVE-2024-441xx/CVE-2024-44182.json index 9a2979777b4..d5e7b85ee3b 100644 --- a/CVE-2024/CVE-2024-441xx/CVE-2024-44182.json +++ b/CVE-2024/CVE-2024-441xx/CVE-2024-44182.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44182", "sourceIdentifier": "product-security@apple.com", "published": "2024-09-17T00:15:51.840", - "lastModified": "2024-09-24T16:52:49.767", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:22.743", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-441xx/CVE-2024-44190.json b/CVE-2024/CVE-2024-441xx/CVE-2024-44190.json index 424fe1966d9..86818a94cb4 100644 --- a/CVE-2024/CVE-2024-441xx/CVE-2024-44190.json +++ b/CVE-2024/CVE-2024-441xx/CVE-2024-44190.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44190", "sourceIdentifier": "product-security@apple.com", "published": "2024-09-17T00:15:52.200", - "lastModified": "2024-09-24T18:02:25.313", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:22.937", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-22" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-452xx/CVE-2024-45230.json b/CVE-2024/CVE-2024-452xx/CVE-2024-45230.json index 3026267a8e1..743f7f06811 100644 --- a/CVE-2024/CVE-2024-452xx/CVE-2024-45230.json +++ b/CVE-2024/CVE-2024-452xx/CVE-2024-45230.json @@ -2,7 +2,7 @@ "id": "CVE-2024-45230", "sourceIdentifier": "cve@mitre.org", "published": "2024-10-08T16:15:11.903", - "lastModified": "2024-10-30T17:35:09.360", + "lastModified": "2025-03-17T15:15:41.520", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, diff --git a/CVE-2024/CVE-2024-462xx/CVE-2024-46261.json b/CVE-2024/CVE-2024-462xx/CVE-2024-46261.json index 14ace5e7e7d..3531ef1285a 100644 --- a/CVE-2024/CVE-2024-462xx/CVE-2024-46261.json +++ b/CVE-2024/CVE-2024-462xx/CVE-2024-46261.json @@ -2,8 +2,8 @@ "id": "CVE-2024-46261", "sourceIdentifier": "cve@mitre.org", "published": "2024-10-01T14:15:05.833", - "lastModified": "2024-10-04T16:40:11.640", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:41.780", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-787" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-465xx/CVE-2024-46585.json b/CVE-2024/CVE-2024-465xx/CVE-2024-46585.json index b741726e5e7..8a11be8e3d8 100644 --- a/CVE-2024/CVE-2024-465xx/CVE-2024-46585.json +++ b/CVE-2024/CVE-2024-465xx/CVE-2024-46585.json @@ -2,8 +2,8 @@ "id": "CVE-2024-46585", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-18T15:15:17.847", - "lastModified": "2024-09-24T16:40:52.817", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:41.990", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-120" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-466xx/CVE-2024-46652.json b/CVE-2024/CVE-2024-466xx/CVE-2024-46652.json index 4138927d888..4f3e6102fc8 100644 --- a/CVE-2024/CVE-2024-466xx/CVE-2024-46652.json +++ b/CVE-2024/CVE-2024-466xx/CVE-2024-46652.json @@ -2,8 +2,8 @@ "id": "CVE-2024-46652", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-20T16:15:05.063", - "lastModified": "2024-09-26T13:32:55.343", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T15:00:28.117", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -40,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,10 +81,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*", + "matchCriteriaId": "9C1D64DC-1EDC-4F62-8D22-E1890B71843C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac8:4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "655619B2-6E8B-4D2E-98E7-028E69597E80" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/zp9080/Tenda/blob/main/Tenda-AC8v4%20V16.03.34.06-fromAdvSetMacMtuWan/overview.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-470xx/CVE-2024-47047.json b/CVE-2024/CVE-2024-470xx/CVE-2024-47047.json index 1b1581d3b6f..939c5134a17 100644 --- a/CVE-2024/CVE-2024-470xx/CVE-2024-47047.json +++ b/CVE-2024/CVE-2024-470xx/CVE-2024-47047.json @@ -2,8 +2,8 @@ "id": "CVE-2024-47047", "sourceIdentifier": "cve@mitre.org", "published": "2024-09-17T14:15:17.790", - "lastModified": "2024-09-27T17:03:35.507", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:42.173", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -49,6 +69,16 @@ "value": "CWE-639" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] } ], "configurations": [ diff --git a/CVE-2024/CVE-2024-479xx/CVE-2024-47943.json b/CVE-2024/CVE-2024-479xx/CVE-2024-47943.json index 7cbe302cba2..ed361048d80 100644 --- a/CVE-2024/CVE-2024-479xx/CVE-2024-47943.json +++ b/CVE-2024/CVE-2024-479xx/CVE-2024-47943.json @@ -2,7 +2,7 @@ "id": "CVE-2024-47943", "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", "published": "2024-10-15T09:15:03.357", - "lastModified": "2024-10-15T12:57:46.880", + "lastModified": "2025-03-17T16:15:23.143", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -15,7 +15,30 @@ "value": "La funci\u00f3n de actualizaci\u00f3n de firmware en la interfaz web de administraci\u00f3n de los dispositivos Rittal IoT Interface & CMC III Processing Unit comprueba si los archivos de parche est\u00e1n firmados antes de ejecutar el script run.sh que los contiene. El proceso de firma es una especie de HMAC con una cadena larga como clave que est\u00e1 codificada en el firmware y est\u00e1 disponible de forma gratuita para su descarga. Esto permite manipular archivos .patch \"firmados\" maliciosos para comprometer el dispositivo y ejecutar c\u00f3digo arbitrario." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", diff --git a/CVE-2024/CVE-2024-497xx/CVE-2024-49748.json b/CVE-2024/CVE-2024-497xx/CVE-2024-49748.json index 7547a02c254..615f96f216f 100644 --- a/CVE-2024/CVE-2024-497xx/CVE-2024-49748.json +++ b/CVE-2024/CVE-2024-497xx/CVE-2024-49748.json @@ -2,7 +2,7 @@ "id": "CVE-2024-49748", "sourceIdentifier": "security@android.com", "published": "2025-01-21T23:15:15.197", - "lastModified": "2025-02-18T20:15:20.983", + "lastModified": "2025-03-17T16:15:23.360", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -15,7 +15,42 @@ "value": "En gatts_process_primary_service_req de gatt_sr.cc, existe una posible escritura fuera de los l\u00edmites debido a un desbordamiento del b\u00fafer de mont\u00f3n. Esto podr\u00eda provocar la ejecuci\u00f3n remota de c\u00f3digo sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], "references": [ { "url": "https://source.android.com/security/bulletin/2025-01-01", diff --git a/CVE-2024/CVE-2024-511xx/CVE-2024-51162.json b/CVE-2024/CVE-2024-511xx/CVE-2024-51162.json index e9ffec70d09..5aef54be8af 100644 --- a/CVE-2024/CVE-2024-511xx/CVE-2024-51162.json +++ b/CVE-2024/CVE-2024-511xx/CVE-2024-51162.json @@ -2,7 +2,7 @@ "id": "CVE-2024-51162", "sourceIdentifier": "cve@mitre.org", "published": "2024-11-20T17:15:18.120", - "lastModified": "2025-01-09T22:15:28.777", + "lastModified": "2025-03-17T15:15:42.383", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -15,7 +15,42 @@ "value": "Un problema en Audimex EE v.15.1.20 y anteriores permite que un atacante remoto escale privilegios." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], "references": [ { "url": "https://en.web-audimex.com/ee-auditmanagement", diff --git a/CVE-2024/CVE-2024-577xx/CVE-2024-57704.json b/CVE-2024/CVE-2024-577xx/CVE-2024-57704.json index ec8b8a2925f..f7848c0b48e 100644 --- a/CVE-2024/CVE-2024-577xx/CVE-2024-57704.json +++ b/CVE-2024/CVE-2024-577xx/CVE-2024-57704.json @@ -2,8 +2,8 @@ "id": "CVE-2024-57704", "sourceIdentifier": "cve@mitre.org", "published": "2025-01-16T23:15:08.113", - "lastModified": "2025-02-03T21:15:14.990", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T15:04:57.907", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -40,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,10 +81,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*", + "matchCriteriaId": "9C1D64DC-1EDC-4F62-8D22-E1890B71843C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac8:4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "655619B2-6E8B-4D2E-98E7-028E69597E80" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Pr0b1em/IoT/blob/master/Tenda%20AC8v4%20V16.03.34.06.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-62xx/CVE-2024-6289.json b/CVE-2024/CVE-2024-62xx/CVE-2024-6289.json index cf2d02a7e5d..de1c7442f21 100644 --- a/CVE-2024/CVE-2024-62xx/CVE-2024-6289.json +++ b/CVE-2024/CVE-2024-62xx/CVE-2024-6289.json @@ -2,7 +2,7 @@ "id": "CVE-2024-6289", "sourceIdentifier": "contact@wpscan.com", "published": "2024-07-15T06:15:02.413", - "lastModified": "2024-11-21T09:49:21.773", + "lastModified": "2025-03-17T16:15:23.660", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 2.7 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 } ] }, diff --git a/CVE-2024/CVE-2024-74xx/CVE-2024-7421.json b/CVE-2024/CVE-2024-74xx/CVE-2024-7421.json index 8486eaf6d5f..da654db87ba 100644 --- a/CVE-2024/CVE-2024-74xx/CVE-2024-7421.json +++ b/CVE-2024/CVE-2024-74xx/CVE-2024-7421.json @@ -2,8 +2,8 @@ "id": "CVE-2024-7421", "sourceIdentifier": "security@devolutions.net", "published": "2024-09-25T16:15:11.187", - "lastModified": "2024-10-01T18:36:59.117", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T15:15:42.580", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, diff --git a/CVE-2024/CVE-2024-89xx/CVE-2024-8909.json b/CVE-2024/CVE-2024-89xx/CVE-2024-8909.json index c9c67713477..2be85bd3959 100644 --- a/CVE-2024/CVE-2024-89xx/CVE-2024-8909.json +++ b/CVE-2024/CVE-2024-89xx/CVE-2024-8909.json @@ -2,8 +2,8 @@ "id": "CVE-2024-8909", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2024-09-17T21:15:13.313", - "lastModified": "2024-09-23T17:51:11.790", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:23.870", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -49,6 +69,16 @@ "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-04xx/CVE-2025-0439.json b/CVE-2025/CVE-2025-04xx/CVE-2025-0439.json index f5b2570977f..37579d25209 100644 --- a/CVE-2025/CVE-2025-04xx/CVE-2025-0439.json +++ b/CVE-2025/CVE-2025-04xx/CVE-2025-0439.json @@ -2,7 +2,7 @@ "id": "CVE-2025-0439", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-01-15T11:15:10.060", - "lastModified": "2025-02-18T22:15:16.870", + "lastModified": "2025-03-17T16:15:24.267", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -15,7 +15,30 @@ "value": " Race in Frames en Google Chrome anterior a la versi\u00f3n 132.0.6834.83 permit\u00eda que un atacante remoto que convenc\u00eda a un usuario para que realizara gestos espec\u00edficos de la interfaz de usuario realizara una suplantaci\u00f3n de la interfaz de usuario a trav\u00e9s de una p\u00e1gina HTML manipulada. (Gravedad de seguridad de Chromium: media)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", @@ -26,6 +49,16 @@ "value": "CWE-362" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] } ], "references": [ diff --git a/CVE-2025/CVE-2025-13xx/CVE-2025-1398.json b/CVE-2025/CVE-2025-13xx/CVE-2025-1398.json new file mode 100644 index 00000000000..efd55b840f3 --- /dev/null +++ b/CVE-2025/CVE-2025-13xx/CVE-2025-1398.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-1398", + "sourceIdentifier": "responsibledisclosure@mattermost.com", + "published": "2025-03-17T15:15:43.243", + "lastModified": "2025-03-17T15:15:43.243", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "responsibledisclosure@mattermost.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "responsibledisclosure@mattermost.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "responsibledisclosure@mattermost.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-426" + } + ] + } + ], + "references": [ + { + "url": "https://mattermost.com/security-updates", + "source": "responsibledisclosure@mattermost.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-16xx/CVE-2025-1619.json b/CVE-2025/CVE-2025-16xx/CVE-2025-1619.json index fb5583d3080..bd0cf2ef308 100644 --- a/CVE-2025/CVE-2025-16xx/CVE-2025-1619.json +++ b/CVE-2025/CVE-2025-16xx/CVE-2025-1619.json @@ -2,16 +2,43 @@ "id": "CVE-2025-1619", "sourceIdentifier": "contact@wpscan.com", "published": "2025-03-16T06:15:12.610", - "lastModified": "2025-03-16T06:15:12.610", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:24.543", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)." + }, + { + "lang": "es", + "value": "El complemento GDPR Cookie Compliance de WordPress anterior a la versi\u00f3n 4.15.7 no depura ni escapa de algunas de sus configuraciones, lo que podr\u00eda permitir a usuarios con privilegios elevados, como el administrador, realizar ataques de cross-site scripting almacenado incluso cuando la capacidad unfiltered_html no est\u00e1 permitida (por ejemplo, en una configuraci\u00f3n de varios sitios)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, "references": [ { "url": "https://wpscan.com/vulnerability/ae9bc19d-1634-4501-a258-8c56b2afee88/", diff --git a/CVE-2025/CVE-2025-16xx/CVE-2025-1620.json b/CVE-2025/CVE-2025-16xx/CVE-2025-1620.json index 6c61e5069c2..fdcc332451a 100644 --- a/CVE-2025/CVE-2025-16xx/CVE-2025-1620.json +++ b/CVE-2025/CVE-2025-16xx/CVE-2025-1620.json @@ -2,16 +2,43 @@ "id": "CVE-2025-1620", "sourceIdentifier": "contact@wpscan.com", "published": "2025-03-16T06:15:12.730", - "lastModified": "2025-03-16T06:15:12.730", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:24.710", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)." + }, + { + "lang": "es", + "value": "El complemento GDPR Cookie Compliance de WordPress anterior a la versi\u00f3n 4.15.7 no depura ni escapa de algunas de sus configuraciones, lo que podr\u00eda permitir a usuarios con privilegios elevados, como el administrador, realizar ataques de cross-site scripting almacenado incluso cuando la capacidad unfiltered_html no est\u00e1 permitida (por ejemplo, en una configuraci\u00f3n de varios sitios)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, "references": [ { "url": "https://wpscan.com/vulnerability/923db805-92e7-4489-8e57-374a19f817d7/", diff --git a/CVE-2025/CVE-2025-16xx/CVE-2025-1621.json b/CVE-2025/CVE-2025-16xx/CVE-2025-1621.json index 6b42e957109..136dae4ca46 100644 --- a/CVE-2025/CVE-2025-16xx/CVE-2025-1621.json +++ b/CVE-2025/CVE-2025-16xx/CVE-2025-1621.json @@ -2,16 +2,43 @@ "id": "CVE-2025-1621", "sourceIdentifier": "contact@wpscan.com", "published": "2025-03-16T06:15:12.857", - "lastModified": "2025-03-16T06:15:12.857", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:24.877", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)." + }, + { + "lang": "es", + "value": "El complemento GDPR Cookie Compliance de WordPress anterior a la versi\u00f3n 4.15.7 no depura ni escapa de algunas de sus configuraciones, lo que podr\u00eda permitir a usuarios con privilegios elevados, como el administrador, realizar ataques de cross-site scripting almacenado incluso cuando la capacidad unfiltered_html no est\u00e1 permitida (por ejemplo, en una configuraci\u00f3n de varios sitios)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, "references": [ { "url": "https://wpscan.com/vulnerability/c30b9631-2024-4081-9cc5-8294a77c5ebb/", diff --git a/CVE-2025/CVE-2025-17xx/CVE-2025-1774.json b/CVE-2025/CVE-2025-17xx/CVE-2025-1774.json new file mode 100644 index 00000000000..82dcf4479c2 --- /dev/null +++ b/CVE-2025/CVE-2025-17xx/CVE-2025-1774.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-1774", + "sourceIdentifier": "cvd@cert.pl", + "published": "2025-03-17T15:15:43.523", + "lastModified": "2025-03-17T15:15:43.523", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect string encoding\u00a0vulnerability in NASK - PIB BotSense allows injection of an additional field separator character or value in the content of some fields of the generated event. A field with additional field separator characters or values can be included in the \"extraData\" field.This issue affects BotSense in versions before 2.8.0." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cvd@cert.pl", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cvd@cert.pl", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-142" + }, + { + "lang": "en", + "value": "CWE-143" + } + ] + } + ], + "references": [ + { + "url": "https://cert.pl/en/posts/2025/03/CVE-2025-1774/", + "source": "cvd@cert.pl" + }, + { + "url": "https://cert.pl/posts/2025/03/CVE-2025-1774/", + "source": "cvd@cert.pl" + }, + { + "url": "https://nask.pl/instytut/dla-biznesu/botsense/", + "source": "cvd@cert.pl" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-206xx/CVE-2025-20637.json b/CVE-2025/CVE-2025-206xx/CVE-2025-20637.json index f4d54771071..5cb0a08379c 100644 --- a/CVE-2025/CVE-2025-206xx/CVE-2025-20637.json +++ b/CVE-2025/CVE-2025-206xx/CVE-2025-20637.json @@ -2,7 +2,7 @@ "id": "CVE-2025-20637", "sourceIdentifier": "security@mediatek.com", "published": "2025-02-03T04:15:08.747", - "lastModified": "2025-02-18T19:15:25.103", + "lastModified": "2025-03-17T15:15:43.697", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2334.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2334.json index a528137d39a..979ddd43f64 100644 --- a/CVE-2025/CVE-2025-23xx/CVE-2025-2334.json +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2334.json @@ -2,13 +2,17 @@ "id": "CVE-2025-2334", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-15T23:15:36.980", - "lastModified": "2025-03-15T23:15:36.980", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:27.017", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChat of the file /api/mjkj-chat/chat/ai/delete/chat of the component Chat History Handler. The manipulation of the argument chatListId leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se ha encontrado una vulnerabilidad clasificada como problem\u00e1tica en 274056675 springboot-openai-chatgpt e84f6f5. Esta vulnerabilidad afecta a la funci\u00f3n deleteChat del archivo /api/mjkj-chat/chat/ai/delete/chat del componente Chat History Handler. La manipulaci\u00f3n del argumento chatListId genera controles de acceso inadecuados. Es posible iniciar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", @@ -107,7 +111,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -136,6 +140,10 @@ { "url": "https://www.cnblogs.com/aibot/p/18732182", "source": "cna@vuldb.com" + }, + { + "url": "https://www.cnblogs.com/aibot/p/18732182", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2337.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2337.json index 3c93d7db7b2..1b8528d1d28 100644 --- a/CVE-2025/CVE-2025-23xx/CVE-2025-2337.json +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2337.json @@ -2,13 +2,17 @@ "id": "CVE-2025-2337", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-16T10:15:25.793", - "lastModified": "2025-03-16T10:15:25.793", - "vulnStatus": "Received", + "lastModified": "2025-03-17T15:15:44.983", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se ha detectado una vulnerabilidad clasificada como cr\u00edtica en tbeu matio 1.5.28. Este problema afecta a la funci\u00f3n Mat_VarPrint del archivo src/mat.c. La manipulaci\u00f3n provoca un desbordamiento del b\u00fafer basado en el mont\u00f3n. El ataque puede iniciarse remotamente. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", @@ -107,7 +111,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +144,10 @@ { "url": "https://vuldb.com/?submit.510779", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/tbeu/matio/issues/267#issue-2883856488", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2338.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2338.json index 024c823e639..53fd0cc9eaa 100644 --- a/CVE-2025/CVE-2025-23xx/CVE-2025-2338.json +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2338.json @@ -2,13 +2,17 @@ "id": "CVE-2025-2338", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-16T13:15:37.827", - "lastModified": "2025-03-16T13:15:37.827", - "vulnStatus": "Received", + "lastModified": "2025-03-17T15:15:45.113", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdup_vprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad clasificada como cr\u00edtica en tbeu matio 1.5.28. La funci\u00f3n strdup_vprintf del archivo src/io.c est\u00e1 afectada. La manipulaci\u00f3n provoca un desbordamiento del b\u00fafer en el mont\u00f3n. Es posible ejecutar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", @@ -107,7 +111,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +144,10 @@ { "url": "https://vuldb.com/?submit.510781", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/tbeu/matio/issues/269#issue-2883920922", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2339.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2339.json index 16688b5173c..5cf17166fbd 100644 --- a/CVE-2025/CVE-2025-23xx/CVE-2025-2339.json +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2339.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2339", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-16T13:15:38.003", - "lastModified": "2025-03-16T13:15:38.003", - "vulnStatus": "Received", + "lastModified": "2025-03-17T15:15:45.253", + "vulnStatus": "Awaiting Analysis", "cveTags": [ { "sourceIdentifier": "cna@vuldb.com", @@ -16,6 +16,10 @@ { "lang": "en", "value": "A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en otale Tale Blog 2.0.5. Se ha clasificado como problem\u00e1tica. Afecta a una parte desconocida del archivo /%61dmin/api/logs. La manipulaci\u00f3n provoca una autenticaci\u00f3n incorrecta. Es posible iniciar el ataque de forma remota. Se ha hecho p\u00fablico el exploit y puede que sea utilizado. Se contact\u00f3 al proveedor con antelaci\u00f3n para informarle sobre esta divulgaci\u00f3n, pero no respondi\u00f3. Esta vulnerabilidad solo afecta a los productos que ya no reciben soporte del fabricante." } ], "metrics": { @@ -66,7 +70,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", @@ -114,7 +118,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -139,6 +143,10 @@ { "url": "https://vuldb.com/?submit.511578", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/Unauthorized.md", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2381.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2381.json new file mode 100644 index 00000000000..70daf302fa2 --- /dev/null +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2381.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-2381", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-03-17T15:15:46.390", + "lastModified": "2025-03-17T15:15:46.390", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/aionman/cve/issues/4", + "source": "cna@vuldb.com" + }, + { + "url": "https://phpgurukul.com/", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.299880", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.299880", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.515896", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2382.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2382.json new file mode 100644 index 00000000000..9d9650afb41 --- /dev/null +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2382.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-2382", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-03-17T15:15:46.590", + "lastModified": "2025-03-17T15:15:46.590", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability classified as critical was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/aionman/cve/issues/5", + "source": "cna@vuldb.com" + }, + { + "url": "https://phpgurukul.com/", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.299881", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.299881", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.515911", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2383.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2383.json new file mode 100644 index 00000000000..795b4b4e738 --- /dev/null +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2383.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-2383", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-03-17T16:15:27.600", + "lastModified": "2025-03-17T16:15:27.600", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability, which was classified as critical, has been found in PHPGurukul Doctor Appointment Management System 1.0. Affected by this issue is some unknown functionality of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/aionman/cve/issues/6", + "source": "cna@vuldb.com" + }, + { + "url": "https://phpgurukul.com/", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.299882", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.299882", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.515913", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-23xx/CVE-2025-2384.json b/CVE-2025/CVE-2025-23xx/CVE-2025-2384.json new file mode 100644 index 00000000000..206f77a91f4 --- /dev/null +++ b/CVE-2025/CVE-2025-23xx/CVE-2025-2384.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-2384", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-03-17T16:15:27.807", + "lastModified": "2025-03-17T16:15:27.807", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument txtName/txtAddress/cmbCity/txtEmail/cmbGender/txtBirthDate/txtUserName2/txtPassword2 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://code-projects.org/", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/yiijiayan/cve/blob/main/sql-cve.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.299883", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.299883", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.516282", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-241xx/CVE-2025-24126.json b/CVE-2025/CVE-2025-241xx/CVE-2025-24126.json index 458c010f97b..9c4e0b843a9 100644 --- a/CVE-2025/CVE-2025-241xx/CVE-2025-24126.json +++ b/CVE-2025/CVE-2025-241xx/CVE-2025-24126.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24126", "sourceIdentifier": "product-security@apple.com", "published": "2025-01-27T22:15:17.603", - "lastModified": "2025-03-04T14:51:45.513", - "vulnStatus": "Analyzed", + "lastModified": "2025-03-17T16:15:25.117", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -36,19 +36,49 @@ }, "exploitabilityScore": 2.1, "impactScore": 5.2 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, "weaknesses": [ { "source": "nvd@nist.gov", - "type": "Secondary", + "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-248xx/CVE-2025-24813.json b/CVE-2025/CVE-2025-248xx/CVE-2025-24813.json index ceb88602bda..1a962c996cd 100644 --- a/CVE-2025/CVE-2025-248xx/CVE-2025-24813.json +++ b/CVE-2025/CVE-2025-248xx/CVE-2025-24813.json @@ -2,7 +2,7 @@ "id": "CVE-2025-24813", "sourceIdentifier": "security@apache.org", "published": "2025-03-10T17:15:35.067", - "lastModified": "2025-03-12T19:15:38.637", + "lastModified": "2025-03-17T16:15:25.343", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -15,30 +15,7 @@ "value": "Equivalencia de ruta: 'file.Name' (punto interno) que conduce a la ejecuci\u00f3n remota de c\u00f3digo y/o divulgaci\u00f3n de informaci\u00f3n y/o contenido malicioso agregado a los archivos cargados a trav\u00e9s del servlet predeterminado habilitado para escritura en Apache Tomcat. Este problema afecta a Apache Tomcat: desde 11.0.0-M1 hasta 11.0.2, desde 10.1.0-M1 hasta 10.1.34, desde 9.0.0.M1 hasta 9.0.98. Si todo lo siguiente fuera cierto, un usuario malintencionado podr\u00eda ver archivos sensibles de seguridad y/o inyectar contenido en esos archivos: - escrituras habilitadas para el servlet predeterminado (deshabilitado por defecto) - soporte para PUT parcial (habilitado por defecto) - una URL de destino para cargas sensibles de seguridad que era un subdirectorio de una URL de destino para cargas p\u00fablicas - conocimiento del atacante de los nombres de los archivos sensibles de seguridad que se estaban cargando - los archivos sensibles de seguridad tambi\u00e9n se estaban cargando a trav\u00e9s de PUT parcial Si todo lo siguiente fuera cierto, un usuario malintencionado podr\u00eda realizar una ejecuci\u00f3n remota de c\u00f3digo: - escrituras habilitadas para el servlet predeterminado (deshabilitado por defecto) - soporte para PUT parcial (habilitado por defecto) - la aplicaci\u00f3n estaba usando la persistencia de sesi\u00f3n basada en archivos de Tomcat con la ubicaci\u00f3n de almacenamiento predeterminada - la aplicaci\u00f3n inclu\u00eda una biblioteca que se puede aprovechar en un ataque de deserializaci\u00f3n Se recomienda a los usuarios actualizar a la versi\u00f3n 11.0.3, 10.1.35 o 9.0.98, que corrige el problema." } ], - "metrics": { - "cvssMetricV31": [ - { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "type": "Secondary", - "cvssData": { - "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", - "baseScore": 5.5, - "baseSeverity": "MEDIUM", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "privilegesRequired": "LOW", - "userInteraction": "REQUIRED", - "scope": "UNCHANGED", - "confidentialityImpact": "LOW", - "integrityImpact": "LOW", - "availabilityImpact": "LOW" - }, - "exploitabilityScore": 2.1, - "impactScore": 3.4 - } - ] - }, + "metrics": {}, "weaknesses": [ { "source": "security@apache.org", @@ -53,20 +30,6 @@ "value": "CWE-502" } ] - }, - { - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "type": "Primary", - "description": [ - { - "lang": "en", - "value": "CWE-444" - }, - { - "lang": "en", - "value": "CWE-502" - } - ] } ], "references": [ @@ -77,6 +40,10 @@ { "url": "http://www.openwall.com/lists/oss-security/2025/03/10/5", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25612.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25612.json new file mode 100644 index 00000000000..d4bf49b3fb6 --- /dev/null +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25612.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-25612", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-03-17T15:15:43.907", + "lastModified": "2025-03-17T15:15:43.907", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "FS Inc S3150-8T2F prior to version S3150-8T2F_2.2.0D_135103 is vulnerable to Cross Site Scripting (XSS) in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious JavaScript into the \"Time Range Name\" field, which is improperly sanitized. When this input is saved, it is later executed in the browser of any user accessing the affected page, including administrators, resulting in arbitrary script execution in the user's browser." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://fs.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/secmuzz/CVE-2025-25612/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25618.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25618.json new file mode 100644 index 00000000000..c270a8f4dd4 --- /dev/null +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25618.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-25618", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-03-17T15:15:44.040", + "lastModified": "2025-03-17T15:15:44.040", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/armaansidana2003/CVE-2025-25618", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/changeweb/Unifiedtransform", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25621.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25621.json new file mode 100644 index 00000000000..a5045ec6068 --- /dev/null +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25621.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-25621", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-03-17T15:15:44.173", + "lastModified": "2025-03-17T15:15:44.173", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacher_id=2&semester_id=1." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/armaansidana2003/CVE-2025-25621", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/changeweb/Unifiedtransform", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25650.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25650.json new file mode 100644 index 00000000000..4cf4965b06d --- /dev/null +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25650.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-25650", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-03-17T15:15:44.293", + "lastModified": "2025-03-17T15:15:44.293", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/AbhijithAJ/Dorset_SmartLock_Vulnerability/blob/main/Dorset_Smart_Lock_Security_Assessment_Report.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://media.blackhat.com/us-13/US-13-Brown-RFID-Hacking-Live-Free-or-RFID-Hard-Slides.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://www.getkisi.com/blog/how-to-copy-access-cards-and-keyfobs", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25663.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25663.json index 837714402c7..9306fe3418f 100644 --- a/CVE-2025/CVE-2025-256xx/CVE-2025-25663.json +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25663.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25663", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-20T23:15:12.350", - "lastModified": "2025-02-21T18:15:41.693", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T15:10:12.850", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -40,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,10 +81,44 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*", + "matchCriteriaId": "9C1D64DC-1EDC-4F62-8D22-E1890B71843C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac8:4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "655619B2-6E8B-4D2E-98E7-028E69597E80" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/WifiExtraSet.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory", + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25664.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25664.json index 9f48d94a124..bd5e8b67b21 100644 --- a/CVE-2025/CVE-2025-256xx/CVE-2025-25664.json +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25664.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25664", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-20T23:15:12.453", - "lastModified": "2025-02-21T18:15:45.417", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T15:19:50.133", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -40,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,10 +81,44 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*", + "matchCriteriaId": "9C1D64DC-1EDC-4F62-8D22-E1890B71843C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac8:4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "655619B2-6E8B-4D2E-98E7-028E69597E80" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/SetIpMacBind.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory", + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-256xx/CVE-2025-25668.json b/CVE-2025/CVE-2025-256xx/CVE-2025-25668.json index 8cb3c5a1ce6..f774a56e7a6 100644 --- a/CVE-2025/CVE-2025-256xx/CVE-2025-25668.json +++ b/CVE-2025/CVE-2025-256xx/CVE-2025-25668.json @@ -2,8 +2,8 @@ "id": "CVE-2025-25668", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-20T23:15:12.660", - "lastModified": "2025-02-21T18:15:53.063", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-03-17T16:59:59.693", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -40,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,10 +81,44 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*", + "matchCriteriaId": "9C1D64DC-1EDC-4F62-8D22-E1890B71843C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac8:v4:*:*:*:*:*:*:*", + "matchCriteriaId": "6EE6A734-72E7-4358-BCA3-A0F1225A8EFB" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/setMacFilterCfg.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link", + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-261xx/CVE-2025-26127.json b/CVE-2025/CVE-2025-261xx/CVE-2025-26127.json new file mode 100644 index 00000000000..ad8d34c8abb --- /dev/null +++ b/CVE-2025/CVE-2025-261xx/CVE-2025-26127.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-26127", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-03-17T15:15:44.427", + "lastModified": "2025-03-17T15:15:44.427", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/pentesttoolscom/vulnerability-research/tree/master/CVE-2025-26127", + "source": "cve@mitre.org" + }, + { + "url": "https://www.filecloud.com/supportdocs/fcdoc/latest/server/release-notes/filecloud-version-23-241-release-notes/minor-filecloud-release-23-241-3", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-263xx/CVE-2025-26312.json b/CVE-2025/CVE-2025-263xx/CVE-2025-26312.json index f687281d039..95ef0f6f2ff 100644 --- a/CVE-2025/CVE-2025-263xx/CVE-2025-26312.json +++ b/CVE-2025/CVE-2025-263xx/CVE-2025-26312.json @@ -2,23 +2,84 @@ "id": "CVE-2025-26312", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-14T18:15:31.817", - "lastModified": "2025-03-14T18:15:31.817", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:25.637", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "SendQuick Entera devices before 11HF5 are vulnerable to CAPTCHA bypass via the captcha parameter" + "value": "SendQuick Entera devices before 11HF5 are vulnerable to CAPTCHA bypass by removing the Captcha parameter." + }, + { + "lang": "es", + "value": "Los dispositivos SendQuick Entera anteriores a 11HF5 son vulnerables a la omisi\u00f3n de CAPTCHA a trav\u00e9s del par\u00e1metro captcha" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-472" + } + ] } ], - "metrics": {}, "references": [ { - "url": "http://sendquick.com", + "url": "https://medium.com/@retro.metro/cve-2025-26312-captcha-bypass-vulnerability-in-sendquick-entera-devices-68708e203216", "source": "cve@mitre.org" }, { - "url": "https://medium.com/@retro.metro/cve-2025-26312-captcha-bypass-vulnerability-in-sendquick-entera-devices-68708e203216", + "url": "https://www.sendquick.com/products/sendquick-entera/", "source": "cve@mitre.org" } ] diff --git a/CVE-2025/CVE-2025-275xx/CVE-2025-27512.json b/CVE-2025/CVE-2025-275xx/CVE-2025-27512.json new file mode 100644 index 00000000000..ba5ee380d2e --- /dev/null +++ b/CVE-2025/CVE-2025-275xx/CVE-2025-27512.json @@ -0,0 +1,98 @@ +{ + "id": "CVE-2025-27512", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-03-17T15:15:44.557", + "lastModified": "2025-03-17T15:15:44.557", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system user to use the actions `org.projectatomic.rpmostree1.deploy` to deploy updates to the system and `org.projectatomic.rpmostree1.finalize-deployment` to reboot the system into the deployed update. Since Zincati v0.0.24, this polkit rule contains a logic error which broadens access of those polkit actions to any unprivileged user rather than just the `zincati` system user. In practice, this means that any unprivileged user with access to the system D-Bus socket is able to deploy older Fedora CoreOS versions (which may have other known vulnerabilities). Note that rpm-ostree enforces that the selected version must be from the same branch the system is currently on so this cannot directly be used to deploy an attacker-controlled update payload. This primarily impacts users running untrusted workloads with access to the system D-Bus socket. Note that in general, untrusted workloads should not be given this access, whether containerized or not. By default, containers do not have access to the system D-Bus socket. The logic error is fixed in Zincati v0.0.30. A workaround is to manually add a following polkit rule, instructions for which are available in the GitHub Security Advisory." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.1, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-783" + }, + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/coreos/zincati/commit/01d8e89f799e6ba21bdf7dc668abce23bd0d8f78", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/coreos/zincati/commit/28a43aa2c1edda091ba659677d73c13e6e3ea99d", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/coreos/zincati/releases/tag/v0.0.24", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/coreos/zincati/releases/tag/v0.0.30", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/coreos/zincati/security/advisories/GHSA-w6fv-6gcc-x825", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-276xx/CVE-2025-27636.json b/CVE-2025/CVE-2025-276xx/CVE-2025-27636.json index 960cf15ae30..83194861519 100644 --- a/CVE-2025/CVE-2025-276xx/CVE-2025-27636.json +++ b/CVE-2025/CVE-2025-276xx/CVE-2025-27636.json @@ -2,13 +2,13 @@ "id": "CVE-2025-27636", "sourceIdentifier": "security@apache.org", "published": "2025-03-09T13:15:34.403", - "lastModified": "2025-03-12T11:15:41.673", + "lastModified": "2025-03-17T15:15:44.750", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Bypass/Injection vulnerability in Apache Camel components under particular conditions.\n\nThis issue affects Apache Camel: from 4.10.0 through <= 4.10.1, from 4.8.0 through <= 4.8.4, from 3.10.0 through <= 3.22.3.\n\nUsers are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS and 3.22.4 for 3.x releases.\n\n\n\nThis vulnerability is present in Camel's default incoming header filter, that allows an attacker to include Camel specific\n\nheaders that for some Camel components can alter the behaviours such as the camel-bean component, to call another method\n\non the bean, than was coded in the application. In the camel-jms component, then a mallicous header can be used to send\n\nthe message to another queue (on the same broker) than was coded in the application.\n\n\n\n\nThe attacker would need to inject custom headers, such as HTTP protocols. So if you have Camel applications that are\n\ndirectly connected to the internet via HTTP, then an attacker could include malicious HTTP headers in the HTTP requests\n\nthat are send to the Camel application.\n\n\n\n\nAll the known Camel HTTP component such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, and camel-netty-http would be vulnerable out of the box.\n\nIn these conditions an attacker could be able to forge a Camel header name and make the bean component invoking other methods in the same bean.\n\nIn terms of usage of the default header filter strategy the list of components using that is: \n\n\n * camel-activemq\n * camel-activemq6\n * camel-amqp\n * camel-aws2-sqs\n * camel-azure-servicebus\n * camel-cxf-rest\n * camel-cxf-soap\n * camel-http\n * camel-jetty\n * camel-jms\n * camel-kafka\n * camel-knative\n * camel-mail\n * camel-nats\n * camel-netty-http\n * camel-platform-http\n * camel-rest\n * camel-sjms\n * camel-spring-rabbitmq\n * camel-stomp\n * camel-tahu\n * camel-undertow\n * camel-xmpp\n\n\n\n\n\n\nThe vulnerability arises due to a bug in the default filtering mechanism that only blocks headers starting with \"Camel\", \"camel\", or \"org.apache.camel.\".\u00a0\n\n\nMitigation:\u00a0You can easily work around this in your Camel applications by removing the\u00a0headers in your Camel routes. There are many ways of doing this, also\u00a0globally or per route. This means you could use the removeHeaders EIP, to filter out anything like \"cAmel, cAMEL\" etc, or in general everything not starting with \"Camel\", \"camel\" or \"org.apache.camel.\"." + "value": "Bypass/Injection vulnerability in Apache Camel components under particular conditions.\n\nThis issue affects Apache Camel: from 4.10.0 through <= 4.10.1, from 4.8.0 through <= 4.8.4, from 3.10.0 through <= 3.22.3.\n\nUsers are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS and 3.22.4 for 3.x releases.\n\n\n\nThis vulnerability is present in Camel's default incoming header filter, that allows an attacker to include Camel specific\n\nheaders that for some Camel components can alter the behaviours such as the camel-bean component, to call another method\n\non the bean, than was coded in the application. In the camel-jms component, then a malicious header can be used to send\n\nthe message to another queue (on the same broker) than was coded in the application. This could also be seen by using the camel-exec component\n\n\n\n\nThe attacker would need to inject custom headers, such as HTTP protocols. So if you have Camel applications that are\n\ndirectly connected to the internet via HTTP, then an attacker could include malicious HTTP headers in the HTTP requests\n\nthat are send to the Camel application.\n\n\n\n\nAll the known Camel HTTP component such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, and camel-netty-http would be vulnerable out of the box.\n\nIn these conditions an attacker could be able to forge a Camel header name and make the bean component invoking other methods in the same bean.\n\nIn terms of usage of the default header filter strategy the list of components using that is: \n\n\n * camel-activemq\n * camel-activemq6\n * camel-amqp\n * camel-aws2-sqs\n * camel-azure-servicebus\n * camel-cxf-rest\n * camel-cxf-soap\n * camel-http\n * camel-jetty\n * camel-jms\n * camel-kafka\n * camel-knative\n * camel-mail\n * camel-nats\n * camel-netty-http\n * camel-platform-http\n * camel-rest\n * camel-sjms\n * camel-spring-rabbitmq\n * camel-stomp\n * camel-tahu\n * camel-undertow\n * camel-xmpp\n\n\n\n\n\n\nThe vulnerability arises due to a bug in the default filtering mechanism that only blocks headers starting with \"Camel\", \"camel\", or \"org.apache.camel.\".\u00a0\n\n\nMitigation:\u00a0You can easily work around this in your Camel applications by removing the\u00a0headers in your Camel routes. There are many ways of doing this, also\u00a0globally or per route. This means you could use the removeHeaders EIP, to filter out anything like \"cAmel, cAMEL\" etc, or in general everything not starting with \"Camel\", \"camel\" or \"org.apache.camel.\"." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-300xx/CVE-2025-30076.json b/CVE-2025/CVE-2025-300xx/CVE-2025-30076.json index d66a27d25e1..8880aa39df8 100644 --- a/CVE-2025/CVE-2025-300xx/CVE-2025-30076.json +++ b/CVE-2025/CVE-2025-300xx/CVE-2025-30076.json @@ -2,13 +2,17 @@ "id": "CVE-2025-30076", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-16T03:15:39.273", - "lastModified": "2025-03-16T03:15:39.273", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:28.220", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the tools/scheduler.pl report parameter." + }, + { + "lang": "es", + "value": "Koha anterior al 24.11.02 permite a los administradores ejecutar comandos arbitrarios a trav\u00e9s de metacaracteres de shell en el par\u00e1metro de informe tools/scheduler.pl." } ], "metrics": { @@ -55,6 +59,10 @@ { "url": "https://github.com/gl0wyy/koha-task-scheduler-rce", "source": "cve@mitre.org" + }, + { + "url": "https://github.com/gl0wyy/koha-task-scheduler-rce", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-300xx/CVE-2025-30077.json b/CVE-2025/CVE-2025-300xx/CVE-2025-30077.json index a4c13636424..35f381ebf7c 100644 --- a/CVE-2025/CVE-2025-300xx/CVE-2025-30077.json +++ b/CVE-2025/CVE-2025-300xx/CVE-2025-30077.json @@ -2,13 +2,17 @@ "id": "CVE-2025-30077", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-16T03:15:39.437", - "lastModified": "2025-03-16T03:15:39.437", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:28.360", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits." + }, + { + "lang": "es", + "value": "Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 permite un p\u00e1nico de \u00edndice fuera de rango en asn1/aper GetBitString a trav\u00e9s de un valor cero de numBits." } ], "metrics": { @@ -51,6 +55,10 @@ { "url": "https://github.com/onosproject/onos-lib-go/issues/295", "source": "cve@mitre.org" + }, + { + "url": "https://github.com/onosproject/onos-lib-go/issues/295", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-300xx/CVE-2025-30089.json b/CVE-2025/CVE-2025-300xx/CVE-2025-30089.json index 97c75718c95..3542d342095 100644 --- a/CVE-2025/CVE-2025-300xx/CVE-2025-30089.json +++ b/CVE-2025/CVE-2025-300xx/CVE-2025-30089.json @@ -2,8 +2,8 @@ "id": "CVE-2025-30089", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-17T00:15:13.067", - "lastModified": "2025-03-17T01:15:37.653", - "vulnStatus": "Received", + "lastModified": "2025-03-17T16:15:28.507", + "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { @@ -55,6 +55,10 @@ { "url": "https://github.com/boxdot/gurk-rs/issues/384", "source": "cve@mitre.org" + }, + { + "url": "https://github.com/boxdot/gurk-rs/issues/384", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-301xx/CVE-2025-30143.json b/CVE-2025/CVE-2025-301xx/CVE-2025-30143.json new file mode 100644 index 00000000000..2cf53a71e78 --- /dev/null +++ b/CVE-2025/CVE-2025-301xx/CVE-2025-30143.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-30143", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-03-17T16:15:28.643", + "lastModified": "2025-03-17T16:15:28.643", + "vulnStatus": "Awaiting Analysis", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/geo-chen/Akamai/blob/main/README.md#cve-2025-30143---waf-bypass-in-akamai-ase-application-security-edge-due-to-obfuscated-payload-leading-to-reflected-xss", + "source": "cve@mitre.org" + }, + { + "url": "https://techdocs.akamai.com/app-api-protector/changelog/dec-9-2024-waf-rule-updates", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index e6746c8c544..8874035d573 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-03-17T15:00:19.995395+00:00 +2025-03-17T17:00:20.357330+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-03-17T14:59:32.307000+00:00 +2025-03-17T16:59:59.693000+00:00 ``` ### Last Data Feed Release @@ -33,69 +33,57 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -285433 +285446 ``` ### CVEs added in the last Commit -Recently added CVEs: `32` +Recently added CVEs: `13` -- [CVE-2021-32584](CVE-2021/CVE-2021-325xx/CVE-2021-32584.json) (`2025-03-17T14:15:17.413`) -- [CVE-2024-54027](CVE-2024/CVE-2024-540xx/CVE-2024-54027.json) (`2025-03-17T14:15:19.613`) -- [CVE-2024-9055](CVE-2024/CVE-2024-90xx/CVE-2024-9055.json) (`2025-03-17T14:15:19.820`) -- [CVE-2025-0595](CVE-2025/CVE-2025-05xx/CVE-2025-0595.json) (`2025-03-17T14:15:20.000`) -- [CVE-2025-0596](CVE-2025/CVE-2025-05xx/CVE-2025-0596.json) (`2025-03-17T14:15:20.143`) -- [CVE-2025-0598](CVE-2025/CVE-2025-05xx/CVE-2025-0598.json) (`2025-03-17T14:15:20.270`) -- [CVE-2025-0599](CVE-2025/CVE-2025-05xx/CVE-2025-0599.json) (`2025-03-17T14:15:20.403`) -- [CVE-2025-0600](CVE-2025/CVE-2025-06xx/CVE-2025-0600.json) (`2025-03-17T14:15:20.527`) -- [CVE-2025-0601](CVE-2025/CVE-2025-06xx/CVE-2025-0601.json) (`2025-03-17T14:15:20.650`) -- [CVE-2025-0826](CVE-2025/CVE-2025-08xx/CVE-2025-0826.json) (`2025-03-17T14:15:20.780`) -- [CVE-2025-0827](CVE-2025/CVE-2025-08xx/CVE-2025-0827.json) (`2025-03-17T14:15:20.913`) -- [CVE-2025-0828](CVE-2025/CVE-2025-08xx/CVE-2025-0828.json) (`2025-03-17T14:15:21.037`) -- [CVE-2025-0829](CVE-2025/CVE-2025-08xx/CVE-2025-0829.json) (`2025-03-17T14:15:21.170`) -- [CVE-2025-0830](CVE-2025/CVE-2025-08xx/CVE-2025-0830.json) (`2025-03-17T14:15:21.317`) -- [CVE-2025-0832](CVE-2025/CVE-2025-08xx/CVE-2025-0832.json) (`2025-03-17T14:15:21.500`) -- [CVE-2025-0833](CVE-2025/CVE-2025-08xx/CVE-2025-0833.json) (`2025-03-17T14:15:21.693`) -- [CVE-2025-2377](CVE-2025/CVE-2025-23xx/CVE-2025-2377.json) (`2025-03-17T13:15:38.937`) -- [CVE-2025-2378](CVE-2025/CVE-2025-23xx/CVE-2025-2378.json) (`2025-03-17T13:15:39.513`) -- [CVE-2025-2379](CVE-2025/CVE-2025-23xx/CVE-2025-2379.json) (`2025-03-17T14:15:23.907`) -- [CVE-2025-2380](CVE-2025/CVE-2025-23xx/CVE-2025-2380.json) (`2025-03-17T14:15:24.117`) -- [CVE-2025-2401](CVE-2025/CVE-2025-24xx/CVE-2025-2401.json) (`2025-03-17T13:15:39.803`) -- [CVE-2025-27102](CVE-2025/CVE-2025-271xx/CVE-2025-27102.json) (`2025-03-17T14:15:21.867`) -- [CVE-2025-29786](CVE-2025/CVE-2025-297xx/CVE-2025-29786.json) (`2025-03-17T14:15:22.237`) -- [CVE-2025-29787](CVE-2025/CVE-2025-297xx/CVE-2025-29787.json) (`2025-03-17T14:15:22.447`) -- [CVE-2025-29788](CVE-2025/CVE-2025-297xx/CVE-2025-29788.json) (`2025-03-17T14:15:22.653`) +- [CVE-2025-1398](CVE-2025/CVE-2025-13xx/CVE-2025-1398.json) (`2025-03-17T15:15:43.243`) +- [CVE-2025-1774](CVE-2025/CVE-2025-17xx/CVE-2025-1774.json) (`2025-03-17T15:15:43.523`) +- [CVE-2025-2381](CVE-2025/CVE-2025-23xx/CVE-2025-2381.json) (`2025-03-17T15:15:46.390`) +- [CVE-2025-2382](CVE-2025/CVE-2025-23xx/CVE-2025-2382.json) (`2025-03-17T15:15:46.590`) +- [CVE-2025-2383](CVE-2025/CVE-2025-23xx/CVE-2025-2383.json) (`2025-03-17T16:15:27.600`) +- [CVE-2025-2384](CVE-2025/CVE-2025-23xx/CVE-2025-2384.json) (`2025-03-17T16:15:27.807`) +- [CVE-2025-25612](CVE-2025/CVE-2025-256xx/CVE-2025-25612.json) (`2025-03-17T15:15:43.907`) +- [CVE-2025-25618](CVE-2025/CVE-2025-256xx/CVE-2025-25618.json) (`2025-03-17T15:15:44.040`) +- [CVE-2025-25621](CVE-2025/CVE-2025-256xx/CVE-2025-25621.json) (`2025-03-17T15:15:44.173`) +- [CVE-2025-25650](CVE-2025/CVE-2025-256xx/CVE-2025-25650.json) (`2025-03-17T15:15:44.293`) +- [CVE-2025-26127](CVE-2025/CVE-2025-261xx/CVE-2025-26127.json) (`2025-03-17T15:15:44.427`) +- [CVE-2025-27512](CVE-2025/CVE-2025-275xx/CVE-2025-27512.json) (`2025-03-17T15:15:44.557`) +- [CVE-2025-30143](CVE-2025/CVE-2025-301xx/CVE-2025-30143.json) (`2025-03-17T16:15:28.643`) ### CVEs modified in the last Commit -Recently modified CVEs: `51` +Recently modified CVEs: `216` -- [CVE-2024-35571](CVE-2024/CVE-2024-355xx/CVE-2024-35571.json) (`2025-03-17T14:28:19.317`) -- [CVE-2024-35576](CVE-2024/CVE-2024-355xx/CVE-2024-35576.json) (`2025-03-17T14:29:25.793`) -- [CVE-2024-35578](CVE-2024/CVE-2024-355xx/CVE-2024-35578.json) (`2025-03-17T14:29:37.593`) -- [CVE-2024-35579](CVE-2024/CVE-2024-355xx/CVE-2024-35579.json) (`2025-03-17T14:29:46.353`) -- [CVE-2024-35580](CVE-2024/CVE-2024-355xx/CVE-2024-35580.json) (`2025-03-17T14:30:14.210`) -- [CVE-2024-38454](CVE-2024/CVE-2024-384xx/CVE-2024-38454.json) (`2025-03-17T14:15:17.887`) -- [CVE-2024-44375](CVE-2024/CVE-2024-443xx/CVE-2024-44375.json) (`2025-03-17T14:15:18.267`) -- [CVE-2024-46568](CVE-2024/CVE-2024-465xx/CVE-2024-46568.json) (`2025-03-17T14:15:19.110`) -- [CVE-2024-46571](CVE-2024/CVE-2024-465xx/CVE-2024-46571.json) (`2025-03-17T14:15:19.380`) -- [CVE-2024-48825](CVE-2024/CVE-2024-488xx/CVE-2024-48825.json) (`2025-03-17T14:40:19.617`) -- [CVE-2024-48826](CVE-2024/CVE-2024-488xx/CVE-2024-48826.json) (`2025-03-17T14:41:08.920`) -- [CVE-2024-57577](CVE-2024/CVE-2024-575xx/CVE-2024-57577.json) (`2025-03-17T14:51:55.140`) -- [CVE-2024-57578](CVE-2024/CVE-2024-575xx/CVE-2024-57578.json) (`2025-03-17T14:53:41.467`) -- [CVE-2024-57703](CVE-2024/CVE-2024-577xx/CVE-2024-57703.json) (`2025-03-17T14:59:32.307`) -- [CVE-2024-57954](CVE-2024/CVE-2024-579xx/CVE-2024-57954.json) (`2025-03-17T14:19:17.890`) -- [CVE-2024-57955](CVE-2024/CVE-2024-579xx/CVE-2024-57955.json) (`2025-03-17T14:18:49.873`) -- [CVE-2024-57956](CVE-2024/CVE-2024-579xx/CVE-2024-57956.json) (`2025-03-17T14:18:18.810`) -- [CVE-2024-57957](CVE-2024/CVE-2024-579xx/CVE-2024-57957.json) (`2025-03-17T14:17:44.493`) -- [CVE-2024-57958](CVE-2024/CVE-2024-579xx/CVE-2024-57958.json) (`2025-03-17T14:16:26.303`) -- [CVE-2024-57959](CVE-2024/CVE-2024-579xx/CVE-2024-57959.json) (`2025-03-17T14:16:10.840`) -- [CVE-2024-57960](CVE-2024/CVE-2024-579xx/CVE-2024-57960.json) (`2025-03-17T14:15:51.643`) -- [CVE-2024-57961](CVE-2024/CVE-2024-579xx/CVE-2024-57961.json) (`2025-03-17T14:14:51.807`) -- [CVE-2024-57962](CVE-2024/CVE-2024-579xx/CVE-2024-57962.json) (`2025-03-17T14:13:41.623`) -- [CVE-2025-25674](CVE-2025/CVE-2025-256xx/CVE-2025-25674.json) (`2025-03-17T14:23:02.403`) -- [CVE-2025-25675](CVE-2025/CVE-2025-256xx/CVE-2025-25675.json) (`2025-03-17T14:26:22.483`) +- [CVE-2024-49748](CVE-2024/CVE-2024-497xx/CVE-2024-49748.json) (`2025-03-17T16:15:23.360`) +- [CVE-2024-51162](CVE-2024/CVE-2024-511xx/CVE-2024-51162.json) (`2025-03-17T15:15:42.383`) +- [CVE-2024-57704](CVE-2024/CVE-2024-577xx/CVE-2024-57704.json) (`2025-03-17T15:04:57.907`) +- [CVE-2024-6289](CVE-2024/CVE-2024-62xx/CVE-2024-6289.json) (`2025-03-17T16:15:23.660`) +- [CVE-2024-7421](CVE-2024/CVE-2024-74xx/CVE-2024-7421.json) (`2025-03-17T15:15:42.580`) +- [CVE-2024-8909](CVE-2024/CVE-2024-89xx/CVE-2024-8909.json) (`2025-03-17T16:15:23.870`) +- [CVE-2025-0439](CVE-2025/CVE-2025-04xx/CVE-2025-0439.json) (`2025-03-17T16:15:24.267`) +- [CVE-2025-1619](CVE-2025/CVE-2025-16xx/CVE-2025-1619.json) (`2025-03-17T16:15:24.543`) +- [CVE-2025-1620](CVE-2025/CVE-2025-16xx/CVE-2025-1620.json) (`2025-03-17T16:15:24.710`) +- [CVE-2025-1621](CVE-2025/CVE-2025-16xx/CVE-2025-1621.json) (`2025-03-17T16:15:24.877`) +- [CVE-2025-20637](CVE-2025/CVE-2025-206xx/CVE-2025-20637.json) (`2025-03-17T15:15:43.697`) +- [CVE-2025-2334](CVE-2025/CVE-2025-23xx/CVE-2025-2334.json) (`2025-03-17T16:15:27.017`) +- [CVE-2025-2337](CVE-2025/CVE-2025-23xx/CVE-2025-2337.json) (`2025-03-17T15:15:44.983`) +- [CVE-2025-2338](CVE-2025/CVE-2025-23xx/CVE-2025-2338.json) (`2025-03-17T15:15:45.113`) +- [CVE-2025-2339](CVE-2025/CVE-2025-23xx/CVE-2025-2339.json) (`2025-03-17T15:15:45.253`) +- [CVE-2025-24126](CVE-2025/CVE-2025-241xx/CVE-2025-24126.json) (`2025-03-17T16:15:25.117`) +- [CVE-2025-24813](CVE-2025/CVE-2025-248xx/CVE-2025-24813.json) (`2025-03-17T16:15:25.343`) +- [CVE-2025-25663](CVE-2025/CVE-2025-256xx/CVE-2025-25663.json) (`2025-03-17T15:10:12.850`) +- [CVE-2025-25664](CVE-2025/CVE-2025-256xx/CVE-2025-25664.json) (`2025-03-17T15:19:50.133`) +- [CVE-2025-25668](CVE-2025/CVE-2025-256xx/CVE-2025-25668.json) (`2025-03-17T16:59:59.693`) +- [CVE-2025-26312](CVE-2025/CVE-2025-263xx/CVE-2025-26312.json) (`2025-03-17T16:15:25.637`) +- [CVE-2025-27636](CVE-2025/CVE-2025-276xx/CVE-2025-27636.json) (`2025-03-17T15:15:44.750`) +- [CVE-2025-30076](CVE-2025/CVE-2025-300xx/CVE-2025-30076.json) (`2025-03-17T16:15:28.220`) +- [CVE-2025-30077](CVE-2025/CVE-2025-300xx/CVE-2025-30077.json) (`2025-03-17T16:15:28.360`) +- [CVE-2025-30089](CVE-2025/CVE-2025-300xx/CVE-2025-30089.json) (`2025-03-17T16:15:28.507`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 95c4a5c8bfb..e9aaeca512c 100644 --- a/_state.csv +++ b/_state.csv @@ -14,7 +14,7 @@ CVE-1999-0012,0,0,39f75058042131c8c69d95e4d7fc12a8a5fb4193fff6791db911f28cdd277d CVE-1999-0013,0,0,80e3d91e4540391afa1ffd2bc5138db4d104f0bbe27d448e6f576263faa96c46,2024-11-20T23:27:36.573000 CVE-1999-0014,0,0,9fdf84d1aa8408865c7bc6e8f183b2c39e08a73ad52a204b58ff41b6985900a1,2024-11-20T23:27:36.817000 CVE-1999-0015,0,0,b5ce1e51b062e658014151693b63cbfd313f3e038efaec7ca5157e6ab4a98c93,2024-11-20T23:27:36.980000 -CVE-1999-0016,0,0,4966326a02830e8932a62e65424eaa2d51a12d5642679b5ed8c9a4e620ada0e1,2024-11-20T23:27:37.157000 +CVE-1999-0016,0,1,ec9d8444c60016c330b5fa353bf7b293a547ae46a52d6bf52d21f98a4dd6a5d2,2025-03-17T15:15:36.883000 CVE-1999-0017,0,0,0ce76344d4936155f7d7dc91d6959daa1045bb1534faba766feb678068fb19c9,2024-11-20T23:27:37.323000 CVE-1999-0018,0,0,3fb00af74c7364907f6d27b2fd0588f5d5756832881b84dae8e4057ec636e0a7,2024-11-20T23:27:37.500000 CVE-1999-0019,0,0,bc4aa1622941b186324ec1df1bc5889c16f93aa674bf2bd9fb264032dc732d96,2024-11-20T23:27:37.667000 @@ -101,7 +101,7 @@ CVE-1999-0099,0,0,c64061766462a975330f237f55f412c8cf815c9138f500d5f0e73742e86d97 CVE-1999-0100,0,0,bdfcb745ad8b6694d3d7f2154d44085b1e296d1264189b021ec42524c7b5e73a,2024-11-20T23:27:51.407000 CVE-1999-0101,0,0,beba6a23222f2973ff0212f7f93a3d2956eb4500668bf7dd08d30b41a8de7bf9,2024-11-20T23:27:51.550000 CVE-1999-0102,0,0,f6856a1f0ae50f8129564db555c2193ca708c40946ecb14a4d5c68641234ccea,2024-11-20T23:27:51.710000 -CVE-1999-0103,0,0,cc87afb811ca58ed8d2e8b5635ba3cb9b5b13a2815387039eb2877d7f43bcd66,2024-11-20T23:27:51.863000 +CVE-1999-0103,0,1,673fc4ea507483bfd8fe06c74968498f5e1e8a8c25c8d41836af88512d2429bf,2025-03-17T15:15:37.887000 CVE-1999-0104,0,0,6de8172387339d2ea848b85b4743c5b3eb4534e721e2d85b6ffc2d3a1cf56e55,2024-11-20T23:27:52.020000 CVE-1999-0105,0,0,be32db701a7d5f483b47f79972b828d367b03c0ce2d68e81ce92be4d325851eb,2024-11-20T23:27:52.173000 CVE-1999-0106,0,0,a8f2a74ce9b0cb31654f6d92b6ab7761a3ff4acc5877528367ba3f5c8a403aac,2024-11-20T23:27:52.310000 @@ -184,7 +184,7 @@ CVE-1999-0182,0,0,0ce3c3c7052535f179f5ea488bc0ae761e423ad2cbbac2e74cc5bedd417d9e CVE-1999-0183,0,0,a039ee6127da3c10eaeeb4be0d42128b774ec973e171cb8976428481ab0983e6,2024-11-20T23:28:04.340000 CVE-1999-0184,0,0,cc32f4d9a823523e5887a1ba037faddbfbd4386806f25c551edf64a075dc9e69,2024-11-20T23:28:04.493000 CVE-1999-0185,0,0,d059d1e2877ebcd5848f56c4df647115aa219c1cfc90d8a72b4e545bf0e59885,2024-11-20T23:28:04.650000 -CVE-1999-0186,0,0,15155e07c7c652b6098c238ac1b4714220396ab05e09736f2ed9da2a4a9b6b55,2024-11-20T23:28:04.807000 +CVE-1999-0186,0,1,1625b9bec52bc6439899ff81b6690d879e67dd7cfc0e1e6b3415538329fcd136,2025-03-17T15:15:38.033000 CVE-1999-0187,0,0,9bc6561c22796809957e7877c51967f698a3f4565801d2b0720225d8314ca89b,2023-11-07T01:54:55.743000 CVE-1999-0188,0,0,a9e756a21020c9457d5bd264c71b9746cf3ad4e84b7dad09c181125c5b37f5d8,2024-11-20T23:28:04.973000 CVE-1999-0189,0,0,f88f237537db8bdb5c0837c5405cff892836e7b74fac4c37855d2be936fdcced,2024-11-20T23:28:05.133000 @@ -252,7 +252,7 @@ CVE-1999-0250,0,0,1833df58efc671175d1bdf880229cc64744d9d910f48647c72866faab7aad8 CVE-1999-0251,0,0,de981eafa3fd73c6f5a9ab1ec72ad90906fcecc1ebe8c1eb2cb094b84a3c8f66,2024-11-20T23:28:14.663000 CVE-1999-0252,0,0,2abb2db1d4df55ef86064d97c3ed5859cedc23d2a9edbfb236464ad55f2c2aff,2024-11-20T23:28:14.813000 CVE-1999-0253,0,0,d58899b091cbe3c2e975d514a5315a7ddd8d3ce80b071fe51f51b0d0e78ab212,2024-11-20T23:28:14.970000 -CVE-1999-0254,0,0,ee85595aec437b265b15f9768b5de2c1ff958733f53a2a9147ef5841510708c5,2024-11-20T23:28:15.120000 +CVE-1999-0254,0,1,841d7bd98da589f6177726216e41805793f18cd861f18e450524b2a8b2257528,2025-03-17T15:15:38.187000 CVE-1999-0255,0,0,75898a9b60f7b6ad4d17aa3ac807769b56f7acda1de876008e14df0f187d7d12,2024-11-20T23:28:15.263000 CVE-1999-0256,0,0,878fcf21c9e94a35b93d1dfdd03f19e34ff6ddd7ab86ee818997d0673ff8dbeb,2024-11-20T23:28:15.413000 CVE-1999-0257,0,0,6a3aca23c6d4b33840163e7d2fc900aef056cec1a9e1f915c686f75b31f82f4b,2024-11-20T23:28:15.563000 @@ -469,7 +469,7 @@ CVE-1999-0468,0,0,cedb446e3a0ee2d2de6b02e0ecc6568f53b72aa418a458b6960d4b647ce1ee CVE-1999-0469,0,0,9c84c8908b9e8d7297d42b45ab430e3f6b2757e5f90d45c1828b2b136db62489,2024-11-20T23:28:48.560000 CVE-1999-0470,0,0,716399d68afe5af98f8f07928594d78b7ea9bac84a6958879bdade1bbc0adbac,2024-11-20T23:28:48.713000 CVE-1999-0471,0,0,130e2b9c996395c3d318c3b3ec3f9c056f3f7a5538b2253e55442ddaf326f4d9,2024-11-20T23:28:48.850000 -CVE-1999-0472,0,0,baef107b6a2c6ba7353af2a6c4f78eca4bb8cacb6efac97cebe5e7dc6dd5baa9,2024-11-20T23:28:48.983000 +CVE-1999-0472,0,1,fb33c9013d92112afab11e58802ccdfb931be1a7f6c82274235ea3f3f583f2f1,2025-03-17T15:15:38.337000 CVE-1999-0473,0,0,450d53e9edf0c915fdba5c5be7a16e9c49253f7a2f1f83b481d053f9d0628723,2024-11-20T23:28:49.120000 CVE-1999-0474,0,0,776b7c40d5742fa5244d34cd2d8109c39afcf4ac66be1349fef6b6e452770ee6,2024-11-20T23:28:49.273000 CVE-1999-0475,0,0,1c2ea4f51d509ce62e5aba45d00ab5ce71f4ece19d05d6e2f45be13178f03c3b,2024-11-20T23:28:49.433000 @@ -512,15 +512,15 @@ CVE-1999-0512,0,0,3a026963c6d06e5b0c0620324eac46ca692351b9989cdd13594a153bf30b20 CVE-1999-0513,0,0,01967a8c6e5d4163598e0ae962b5ddb770dba1064bd9dfeee5a453f78b65f2c7,2024-11-20T23:28:55.057000 CVE-1999-0514,0,0,347c4a2d398d06e6a3368952e5a8020445903bd91e89b411f3acb95319047c39,2024-11-20T23:28:55.203000 CVE-1999-0515,0,0,9d2272a3a6d89544d57c36e13447a75c60133678aaf84a64ee81024bf89752dc,2024-11-20T23:28:55.347000 -CVE-1999-0516,0,0,094285bb0a9c09c3827e71add54f1e3cad2203f430e8168060873aa425e4a768,2024-11-20T23:28:55.497000 -CVE-1999-0517,0,0,60344bf01d007e07c85ce799f46a34860dbeb24e24996274bcbccaf0ccccb98e,2024-11-20T23:28:55.640000 +CVE-1999-0516,0,1,6cfd3e39a6087949624d3a11ef0596a269594d9cd9bca6ab2f478deba762a92f,2025-03-17T15:15:38.497000 +CVE-1999-0517,0,1,cee4ed061e2e4aa9da69ba078184d07c85dd9f3f4b226ec26035631dffa87244,2025-03-17T15:15:38.620000 CVE-1999-0518,0,0,bfe20e0873f5a3cbc0e37b8f51bfb60514c0a3adbea817856186f501eaf62933,2024-11-20T23:28:55.800000 CVE-1999-0519,0,0,d01a358ba943ff30c2ab095d92528e2bf51a2b9e2f800dc9c388a0686627c91d,2024-11-20T23:28:55.947000 CVE-1999-0520,0,0,a50826753fed31fe0ded7660f3e98857e77c8326681da4f617952615ea83ccc7,2024-11-20T23:28:56.090000 CVE-1999-0521,0,0,72f984b9135169bbcdba5e90d77dc704e4df9c73634c1f610f8332bb335c7fad,2024-11-20T23:28:56.237000 CVE-1999-0522,0,0,5258a9bf0b1e7aef732aff04778e12d64ff3d0ea518006800f754153097598c3,2024-11-20T23:28:56.387000 CVE-1999-0523,0,0,b18fa649dddc466184168a6a5c4e3df9346f0eb85ecb0e6fa6524bb10ad71a4e,2024-11-20T23:28:56.520000 -CVE-1999-0524,0,0,b44c9626192fe4c4ce109f4ebbf7c307782d1875020b3fc827dd43e904c4f2c0,2024-11-20T23:28:56.657000 +CVE-1999-0524,0,1,62ed4c06b48e059187bfa04f59477b1883dfb866048a989791c4db9fdc411001,2025-03-17T15:15:38.743000 CVE-1999-0525,0,0,b77bad6b45c078f32c3a9565adfd3fcc8b4dd0d04f5c7434beec22da5192a21d,2024-11-20T23:28:56.920000 CVE-1999-0526,0,0,80bf7e77978ca0186420efa61ec197e327ce5609fcdc9c9dcb576b6925fcf552,2024-11-20T23:28:57.050000 CVE-1999-0527,0,0,293e71eb05739fa8c23185ef0d083bea07523003781c47c124823d1a3ce8d1ba,2024-11-20T23:28:57.210000 @@ -528,7 +528,7 @@ CVE-1999-0528,0,0,41ddf3fe04edde29b031ff3b0cf1c475f4fa523398b694348a3c62027f5b8e CVE-1999-0529,0,0,493ce9124421d91557f5ff7e74db4e1f93e98c903e9bf2de82522932b2c899af,2024-11-20T23:28:57.483000 CVE-1999-0530,0,0,95759fde651f63e0c2eda4d0632c556d970460002a4df1154440155f833bc8df,2024-11-20T23:28:57.610000 CVE-1999-0531,0,0,905537289b1e668ebc82273b087e6d1f6951face86e3365116200d06476591f0,2023-11-07T01:54:58.853000 -CVE-1999-0532,0,0,d04144add65f53f490ecde9041df5d9fd91c98dc587498df4eb9608d444556f6,2024-11-20T23:28:57.760000 +CVE-1999-0532,0,1,6a2d811fd949d9d9df7bda0e9523795aebc2d7d66948ce735876a9c458f9eda7,2025-03-17T15:15:38.950000 CVE-1999-0533,0,0,ef70dec2e2d76438c0836ab7786f340ce70638b1fe3cbc25b0fe2359d1786b52,2024-11-20T23:28:57.893000 CVE-1999-0534,0,0,efde1acb5906cf5d9eab4c1f58f98d71b038b651408c4074098f0288f3c673ec,2024-11-20T23:28:58.030000 CVE-1999-0535,0,0,8f5d14da0ba2a4ec67ec15761d13002f13af0e1fe921451175783e2d76ef2707,2024-11-20T23:28:58.177000 @@ -133695,7 +133695,7 @@ CVE-2019-15702,0,0,c2f62a8fc685f59432097849f067752ff2258af52216e2e20f1941484236c CVE-2019-15703,0,0,dafc4d7d680c407d9ed228404a72480634fc596e6df37c797bf611031e95df93,2024-11-21T04:29:17.510000 CVE-2019-15704,0,0,df7aa8579d0bb3433accbb795952243409a7988f4ea2870e2b906941367aacb9,2024-11-21T04:29:17.633000 CVE-2019-15705,0,0,d48b3e7a3f8d779152f91dd1c08936b1b523deab5557c640dc09a79408a26473,2024-11-21T04:29:17.743000 -CVE-2019-15706,1,1,45ef0005a3c81bea4da17add0383d214da894da57955f4839010c65720bd5f83,2025-03-17T14:15:15.107000 +CVE-2019-15706,0,0,45ef0005a3c81bea4da17add0383d214da894da57955f4839010c65720bd5f83,2025-03-17T14:15:15.107000 CVE-2019-15707,0,0,ae12cc6ca0d40df6bf9092c805d6df373616afe0956575e7405ab5b161017425,2024-11-21T04:29:17.863000 CVE-2019-15708,0,0,f4ced74b8caa398c50922c709bf2008f3c54a61670c71013f4c9cbc1cd4bfc82,2024-11-21T04:29:17.990000 CVE-2019-15709,0,0,48a71cc7b608dd3acc9e4c1d0029a5c65f6a2ae51db91c97e4061f3298389907,2024-11-21T04:29:18.117000 @@ -135405,7 +135405,7 @@ CVE-2019-17655,0,0,f9fac732a067b1a9e64b219d368783b3294b0c61a4fbdd1e9e0c4ac95419e CVE-2019-17656,0,0,1534e682388077c18a66375a0b769b9f23c6820937cc3618dfb5a8e0322cfe13,2024-11-21T04:32:42.930000 CVE-2019-17657,0,0,761f15dea2c50abcdb1f3a93076f13baa894c39e8f64e3f300e51f7762675073,2024-11-21T04:32:43.063000 CVE-2019-17658,0,0,b017d4a442f3012156eebe7c0a2a31d6ef0f22a21bad8d6d82472b3f1a70fcfd,2024-11-21T04:32:43.190000 -CVE-2019-17659,1,1,68df4b5215774234eb72f4099f7a5c0aac90ae8293efd268932612e2313c4248,2025-03-17T14:15:16.360000 +CVE-2019-17659,0,0,68df4b5215774234eb72f4099f7a5c0aac90ae8293efd268932612e2313c4248,2025-03-17T14:15:16.360000 CVE-2019-1766,0,0,347fef68ad0c79f2caf0982e322c7365f36f23ea94c55ba5468ad2ce1db1ca03,2024-11-21T04:37:19.770000 CVE-2019-17660,0,0,6323f037ebc03efc369a87354992e95ebf95deaf5fd7e9be8b2bbbd3af281992,2024-11-21T04:32:43.300000 CVE-2019-17661,0,0,556b7c59f59990108eef104f7845b9ce4ffafe4f4a7ec005af59692a41af7313,2024-11-21T04:32:43.430000 @@ -141622,7 +141622,7 @@ CVE-2019-6692,0,0,c83d1d50fe9e3ea13be08e666bbaabb816719df64e41ca182df3073131b01b CVE-2019-6693,0,0,6142325872f322394104546823563dc592e669b4c0f7fa2c6225a5de79d31aef,2024-11-21T04:46:58.180000 CVE-2019-6695,0,0,fc502f1b40596ca611edc216601ae543e662cbd59fe73e51f3b186e669ce96b1,2024-11-21T04:46:58.287000 CVE-2019-6696,0,0,69eed40a4a0cae512f578bd58c40d9921b883eb5441c5059e04af319e29f1622,2024-11-21T04:46:58.393000 -CVE-2019-6697,1,1,9dd1239a45d3418030306a45eb3e284ddca4d2afa6ef448ed99d680ce63e9c39,2025-03-17T14:15:16.567000 +CVE-2019-6697,0,0,9dd1239a45d3418030306a45eb3e284ddca4d2afa6ef448ed99d680ce63e9c39,2025-03-17T14:15:16.567000 CVE-2019-6698,0,0,cffb55c50dd7fde94c89a59c68f5bd4b25ebe91ee691ebdf3af3fba753486b70,2024-11-21T04:46:58.520000 CVE-2019-6699,0,0,ee9e5740053fb904243f3e9b58c5b42a483199ab55e9ae389d534829db76ad85,2024-11-21T04:46:58.647000 CVE-2019-6700,0,0,722e5067a7aac495d4584e00d49c1b2ec3408c9bd3e5953982e54a5dbb401082,2024-11-21T04:46:58.753000 @@ -157434,7 +157434,7 @@ CVE-2020-29005,0,0,4384c3631214d269aacf79a3e86f6c8377581bda5e016af03d5c4d000db51 CVE-2020-29006,0,0,a1eada1af14088aa47b18cfd0cd32accb4e1430290b5d6124463e288eefbdce2,2024-11-21T05:23:29.027000 CVE-2020-29007,0,0,38423e2017ec37ff5dc84a3d59d7edd5ef57069d01e93c88df502c0c5e4142a4,2025-02-06T17:15:12.007000 CVE-2020-2901,0,0,0ae88d0e1bd825c44287334593753f0c8904a32f5681a5bf25d6dfeb866922df,2024-11-21T05:26:35.197000 -CVE-2020-29010,1,1,c23b940225a264bfcbbbdc049e743506e005f32d5416f0ad7c023320e1439002,2025-03-17T14:15:16.730000 +CVE-2020-29010,0,0,c23b940225a264bfcbbbdc049e743506e005f32d5416f0ad7c023320e1439002,2025-03-17T14:15:16.730000 CVE-2020-29011,0,0,93dfcca0e4592d4b53a9c1101459de2f73391ad05b892ac375c05ff854fc117e,2024-11-21T05:23:29.530000 CVE-2020-29012,0,0,6a75f1e03c3cce4f34c7b0bc85a1f81368af8e34915196ecaa70ac419304e38e,2024-11-21T05:23:29.747000 CVE-2020-29013,0,0,fe75b5c7b132f4abbd6a68a4e0183c4e1a9cef8bafcf834c794df9df6af73b5e,2024-11-21T05:23:30.033000 @@ -164247,7 +164247,7 @@ CVE-2020-9290,0,0,05be46188c3b5113fead9225affd075e6bb78110f77001cc85596f6676ae99 CVE-2020-9291,0,0,f9fea5395271f9c553868cda2b413fb3fa4b18c7647538ea079a448b4cba8876,2024-11-21T05:40:22.113000 CVE-2020-9292,0,0,8ab273faff067b8706ac7895f03e715ba0a7ad2b72c36ab3b7e3e3e1414687f3,2024-11-21T05:40:22.240000 CVE-2020-9294,0,0,67ad78b8c099f38d9eae0caf9b56fbb0e37b13388c7a09b73db4ed076b24fd72,2024-11-21T05:40:22.350000 -CVE-2020-9295,1,1,9de4d8846f3e32ca729ba7ca3f01cd2d43773639b7aa03a51b73966fdbd13870,2025-03-17T14:15:16.903000 +CVE-2020-9295,0,0,9de4d8846f3e32ca729ba7ca3f01cd2d43773639b7aa03a51b73966fdbd13870,2025-03-17T14:15:16.903000 CVE-2020-9296,0,0,319f193242d28c9b2331d2622b6522aa3f17b2a14bfb8170adf65c70bc8b1755,2024-11-21T05:40:22.460000 CVE-2020-9297,0,0,0b0fbca32b17921ab9ea37cfea0aaec8672b06fd622d87be835b9c2419d9a687,2024-11-21T05:40:22.563000 CVE-2020-9298,0,0,e9b5da06703ea34aebe5402cc6a563a28a39a7a35c3f2585776be888b303f2b7,2024-11-21T05:40:22.667000 @@ -168648,7 +168648,7 @@ CVE-2021-22122,0,0,daccf6eb03f77c1eee5e53f73ad48eab4da2b54d632c2516fc540a3c5e5a8 CVE-2021-22123,0,0,e2a1d684c88d3015a825524d08af8ec5a1f3e37d0ff6c3576fb70804bd3da201,2024-11-21T05:49:33.030000 CVE-2021-22124,0,0,73f373c37e74f2f47510495d04fecbe05d68ef4f8e9485115bbfa39ae59a55f2,2024-11-21T05:49:33.153000 CVE-2021-22125,0,0,349a9d621a56516de9c99167bc7080206aac0e0eabbe4ed553d3a430869f40cc,2024-11-21T05:49:33.280000 -CVE-2021-22126,1,1,9a22e99d365742bc0f233c6b15100171984693edadb8c519970d2b6dbcd1e5b6,2025-03-17T14:15:17.067000 +CVE-2021-22126,0,0,9a22e99d365742bc0f233c6b15100171984693edadb8c519970d2b6dbcd1e5b6,2025-03-17T14:15:17.067000 CVE-2021-22127,0,0,ad1b3b7574f21eaf605a9f6797f66a9d2c076d1d50381c288547614312c0f4ab,2024-11-21T05:49:33.407000 CVE-2021-22128,0,0,58ecde61044bbc4154c7a6137acfe0a7097ce06a9ca1b0a3d0ff02d563a41e49,2024-11-21T05:49:33.540000 CVE-2021-22129,0,0,5ed725b52bd2788a02852468906391f3226a62e85ea9800261ba6ff5c151a549,2024-11-21T05:49:33.650000 @@ -171960,7 +171960,7 @@ CVE-2021-26083,0,0,4711545f1d357e7393e6d3e534d28e1f9e5c94f03b05466f1c19461e6b4f4 CVE-2021-26084,0,0,d23ad29d583aa5a1f44a3d9a5dabd04a79cc0a4df22e34fc50601c61168a17bb,2025-02-10T18:02:37.233000 CVE-2021-26085,0,0,084a7b9213a5429e084ff7374ef3ac34d96b9c74eb581ae76de86429116d6482,2025-03-13T20:02:09.457000 CVE-2021-26086,0,0,3d5d923f606b69549c3a79879eb459bf78ed055d3c3caf26051d035c6feaac32,2025-02-09T20:48:00.020000 -CVE-2021-26087,1,1,b7451f3c3b33dac06d7c97a0a2b3cbd1aebc88ffdaf0a0e94e6e063dc4fd1daa,2025-03-17T14:15:17.247000 +CVE-2021-26087,0,0,b7451f3c3b33dac06d7c97a0a2b3cbd1aebc88ffdaf0a0e94e6e063dc4fd1daa,2025-03-17T14:15:17.247000 CVE-2021-26088,0,0,c26e6d0a3d2d39cb55ac02c63c46a7014509930ab7b8dfa748b6804dc94fc467,2024-11-21T05:55:50.907000 CVE-2021-26089,0,0,6d8844e9a67c7f9126a795bec2dc39b17e18dec81df6faf3063ff3a641ec63a3,2024-11-21T05:55:51.027000 CVE-2021-26090,0,0,e3f8c1b2626ee36fd370ee3c68bcb4a42ad821868abe4e4fa89f643789009be7,2024-11-21T05:55:51.150000 @@ -176521,7 +176521,7 @@ CVE-2021-3258,0,0,8dd5b1c71c9b5d34cc04b8201f2e27b4d1dfde131cc33976db5e8f491592da CVE-2021-32580,0,0,e18b5f5f73b7d39fe74d793ffae94c565a2b5cce341c98d4007cd530169ec205,2024-11-21T06:07:18.973000 CVE-2021-32581,0,0,c755dce8ccfab81ebc060c7c6173dd8c5aa02618ef0686a151765093bd8db4b2,2024-11-21T06:07:19.127000 CVE-2021-32582,0,0,b1ab80c3fa706e34524a0ab26b215f8ab4724bc3035ee0ed49d8c04b319b8791,2024-11-21T06:07:19.280000 -CVE-2021-32584,1,1,f09b1b98c64164de42786b8a845a3d9253d3305655b507705e7f38379d2714c1,2025-03-17T14:15:17.413000 +CVE-2021-32584,0,0,f09b1b98c64164de42786b8a845a3d9253d3305655b507705e7f38379d2714c1,2025-03-17T14:15:17.413000 CVE-2021-32585,0,0,5768abccf57646b16f23da60be2ff4de982ce08fd70ce938bfb45c990c620d61,2024-11-21T06:07:19.453000 CVE-2021-32586,0,0,34e4c2125f96b38865aef7ca62056093a6679c5b5fcdc8f412729682e6b6545a,2024-11-21T06:07:19.600000 CVE-2021-32587,0,0,b3a3ebaa57939f1fce261725e56c8d4427307bf6a8feda4373094acc2be6caa8,2024-11-21T06:07:19.757000 @@ -187425,19 +187425,19 @@ CVE-2021-47162,0,0,eeb8edd49e9981d884e096ebddd00ac92a1833a1574ec75c16d1cc4120e24 CVE-2021-47163,0,0,b54a9a5b8d126c1cb7d9afb8a01265f4d31b06d912e6776c2dcca44de6a58af1,2025-03-13T21:23:34.380000 CVE-2021-47164,0,0,5f23854b4f099fb6fdac7718ce7e13674f7549368640ba9489dcff1f7fab1462,2024-11-21T06:35:31.987000 CVE-2021-47165,0,0,a890c0a37eaa2f35d93ed446611ca60353e5c046315f2087140017da2bbab3df,2025-03-03T17:46:31.550000 -CVE-2021-47166,0,0,38374cf4e19903f2cf499bca50a8e9401feb9ffb1d6b687caf34d3a441b185ff,2024-11-21T06:35:32.270000 -CVE-2021-47167,0,0,8f23c20f00d7bcecf41f124df6873fdb678a3fbcfc52ac9e56b95db0c000dfe6,2024-11-21T06:35:32.403000 -CVE-2021-47168,0,0,69e0628c7c33c903054e858d6fbb9825c1fa6e927e7e256f90ad3050c9de917f,2024-11-21T06:35:32.533000 +CVE-2021-47166,0,1,6bcbde94f3b8f325419937f23cb53569c1a8a455bfb9beeb500d51c2a175d32b,2025-03-17T15:03:38.947000 +CVE-2021-47167,0,1,6d98b5f6a5e9d4c3a526429d5d079c256d4039da1ea60b7f4bc02d86520e8fa1,2025-03-17T15:03:30.547000 +CVE-2021-47168,0,1,a65a2b937b9d97590e949cfb52282e972fae79a44596381a73c54953c033dd4a,2025-03-17T15:03:22.997000 CVE-2021-47169,0,0,3adf53cbf72a86cc1f74ce1f9b5de10781252e75cab66ddca394c5f7c4997a33,2025-03-03T17:45:46.213000 -CVE-2021-47170,0,0,f528b4588e7eed6e5fdd00a5b0f61a46293a6c5193dffac60ca66a19588160ce,2024-11-21T06:35:32.790000 +CVE-2021-47170,0,1,78a99b1bfcf2952726b0c4fa3fdb66c6766cecbdbfd7618234e13ec843b3da63,2025-03-17T15:03:13.297000 CVE-2021-47171,0,0,53f9efba59fa2e2383ad5139a1ec5849f84c59bcb80640d33ac39a94bd1d81f1,2024-11-21T06:35:32.923000 CVE-2021-47172,0,0,d828888ed8ef79257f45aee96101e886d726fa717d11fd369327fc396e922a4a,2024-11-21T06:35:33.073000 CVE-2021-47173,0,0,f11f268851776dd3b6ca8814b72a1a43b2c34c499c8d8d76da5a007bbce203ce,2024-11-21T06:35:33.280000 -CVE-2021-47174,0,0,825b03e435f4b8a664c92db9b052c2cd412d9b4f83916523be59f9d01bada273,2024-11-21T06:35:33.423000 -CVE-2021-47175,0,0,5a512ee416d8316cf2943966485d10a5bc5ba3124562257d840f489d6614a859,2024-11-21T06:35:33.540000 -CVE-2021-47176,0,0,dc802f780b3ea0e51d2ae7e34c867371a1de49da9d2037cc8fcb5f545fc1193a,2024-11-21T06:35:33.660000 -CVE-2021-47177,0,0,5e6a0e3fb5db6559278a237b1da3bdfb3d44de1d3134f065e28e9fc3bafcb97d,2024-11-21T06:35:33.777000 -CVE-2021-47178,0,0,6cb7cb1887ac24616434062400b45bea43e4e5b1a17ee375f85aa54c851ef099,2024-11-21T06:35:33.900000 +CVE-2021-47174,0,1,a5ef836ee2ba114820081e64307ce9d15710b0ea960bb1f90bae1befab788556,2025-03-17T15:03:04.400000 +CVE-2021-47175,0,1,264e6b2eddbeefab0978c25cd6b0e19b27620ee46cf388415506a333f3e0838f,2025-03-17T15:02:54.260000 +CVE-2021-47176,0,1,826fc700dd185225965e083bc00b65da1223547c97e5bd3fb4e19c9850b3a515,2025-03-17T15:02:42.880000 +CVE-2021-47177,0,1,6eb3b379a92d0a95d98e0be287de99e4e8dd679ad3ccd2b5bb9584f12842db61,2025-03-17T15:20:45.187000 +CVE-2021-47178,0,1,7aec1c3f388a0b4ca541ecfee5d98c62a36c8f90c9e66fad2194fdda0fa58d7d,2025-03-17T15:20:33.717000 CVE-2021-47179,0,0,a8b6b384d1d3dd4500e62419e8055586dec0b9099243b3a6cfff7cfb16fe0e45,2024-11-21T06:35:34.020000 CVE-2021-47180,0,0,04d7ef49a6dbe27745e9ac88054127415a124aa60051eed7e0cd4e5e824fa8ec,2025-01-07T17:17:24.333000 CVE-2021-47181,0,0,c987c8c832cf3c59bca5d287fe34238d65206d3d339884f075eab0b776cf4e0a,2024-12-20T14:31:22.240000 @@ -188785,7 +188785,7 @@ CVE-2022-0955,0,0,62e47da71fb1edb3bee60b900e942f302b0601d51fc9cc1e9c4832a293e3cc CVE-2022-0956,0,0,27145832601a89e75aedaf6e0c395cdfe7bab202db58fc71581ad9325cf4a54e,2024-11-21T06:39:44.443000 CVE-2022-0957,0,0,e8049ef7b07a929a6c5c11df4248ce0c108f6e5de004b78ac3f33fe747305436,2024-11-21T06:39:44.570000 CVE-2022-0958,0,0,1ecff22837653d12c076993c463ecd21acda76080b5e559b736d73fd9d02c895,2024-11-21T06:39:44.687000 -CVE-2022-0959,0,0,ce827a46a4a175c31918b171eb7cc20b83167f533c6e871981bcced80a14ac80,2024-11-21T06:39:44.797000 +CVE-2022-0959,0,1,6e61a632ddb41cd9683b14044672c73616f29e5a1af1a2dddb4b67e6496c2161,2025-03-17T16:46:07.940000 CVE-2022-0960,0,0,df03ab51d8bbd802be749b956ac120c437f1a074b04ec7b6885fbf7baaf51d04,2024-11-21T06:39:44.903000 CVE-2022-0961,0,0,8306342f4fdf805895ae665a6fd7ed7efe1ff3a46bef91f45cad9317b8bc1be0,2024-11-21T06:39:45.030000 CVE-2022-0962,0,0,6444af7143d1c13ad8667f3041f1a3a8cf698eaf49301221583edf57956fbdc5,2024-11-21T06:39:45.147000 @@ -188971,7 +188971,7 @@ CVE-2022-1145,0,0,c49cbfb01b9e19c08802b705efc8cf8d7569a976541ece323cd556ec8e5a65 CVE-2022-1146,0,0,58ff088ef63518094bdf568d37555b51d74d0afce32f11706a79f5f6295bcaec,2024-11-21T06:40:08.200000 CVE-2022-1148,0,0,56753dfbbb7f1f5f6a6207d30cf732df7ee63395e02592415c6a3ff6dc1cd7eb,2024-11-21T06:40:08.320000 CVE-2022-1152,0,0,85ab854272624ef99bd5b14f7a041c9d8eeddabae8577f119f869a9fd06b51bd,2024-11-21T06:40:08.447000 -CVE-2022-1153,0,0,e4c84e3cc2b9d7143e3af0500de966b9748178709a32ad2f7414878b98db4c9b,2024-11-21T06:40:08.570000 +CVE-2022-1153,0,1,0657e37002651518eb6bc13cd1bc136343822f6808b927e3cb038c818cfe9b8f,2025-03-17T16:58:36.687000 CVE-2022-1154,0,0,40d2b406a63b0744723cdebdfb167ddae700a50888c3733ab707da2f3ec45d89,2024-11-21T06:40:08.687000 CVE-2022-1155,0,0,bbb4221ea262641d5b76fa97b19799f7e310ea0aaa00926a1d6e36d9ac8734c0,2024-11-21T06:40:08.890000 CVE-2022-1156,0,0,bbe92f9c08e494b5fdf09abc4faac95d70021360e3051443690f1adb6fa556b3,2024-11-21T06:40:09.020000 @@ -213613,88 +213613,88 @@ CVE-2022-49438,0,0,60292a32fe3600bd265f2857a3e4138d4123c148db677fb48cf18b53ef539 CVE-2022-49439,0,0,3ad741a2dc7fe653190749ada79e1ed0ae4a63062779bcf76d9b7c6654ac4225,2025-02-26T07:01:20.337000 CVE-2022-4944,0,0,4f9cb06fff170c9f36034ff3c0e0d5a7fddec2b4f0eb92639847dd2d54218639,2024-11-21T07:36:18.190000 CVE-2022-49440,0,0,399b74cc11f80f519e701b62a4251ad7a344cf62daefeff726753eae59d73cb8,2025-02-26T07:01:20.430000 -CVE-2022-49441,0,0,30a2195d738105122c7c64f14ca46cf28bb348b97fc622634b919fa8560f6637,2025-02-26T07:01:20.523000 +CVE-2022-49441,0,1,094c5517cd1eb088a8b00c9e248246eaf9488bc76a19aac586c4e93b7dc15faf,2025-03-17T16:53:58.013000 CVE-2022-49442,0,0,41292d866345868718998f234c039df183a121383419fe324dde57710e4eb6d5,2025-02-26T07:01:20.630000 -CVE-2022-49443,0,0,c34425dc711b9ab52ae3e3ff965dacf8b2d095811752ef899b453c183af34e8d,2025-02-26T07:01:20.730000 +CVE-2022-49443,0,1,60e3a80f5d92740ccf30c399e5116be8c22906085bb666cd0d508131b692424b,2025-03-17T16:53:46.963000 CVE-2022-49444,0,0,32a63dbc501c11237648dd22d23a930c84002b83762a8ef62b33f59b6c797383,2025-02-26T07:01:20.820000 -CVE-2022-49445,0,0,1a7cb7e0b8ea0eb7c7c20ddcaa0a15501c7969ed78172b524114648beeb70078,2025-02-26T07:01:20.913000 -CVE-2022-49446,0,0,cc9657402c7d9343d426f4c8ae5641e8c2f493b8c7c6683f49be01f8dec9fe86,2025-02-26T07:01:21.010000 -CVE-2022-49447,0,0,7d64a1bab96021fb2047d78eed48b0ecb0138d0f5ef3f38a7fdccd25b16ca39f,2025-02-26T07:01:21.103000 -CVE-2022-49448,0,0,69d2988375e64558a71d5f05067366e7bf8c437a901b7936cbddc9b07c0ab316,2025-02-26T07:01:21.200000 -CVE-2022-49449,0,0,52b8912a3097c0aac4ebc1f65d3c5e956886114c77ae5e7834cbc6ee2dd0c4d7,2025-02-26T07:01:21.290000 +CVE-2022-49445,0,1,a4200712fe6155bc047610e33d00c309abd14417fb9ca48e8d76e88ad0a5b127,2025-03-17T16:12:59.620000 +CVE-2022-49446,0,1,466e253b7ee7df680733887bb5d12a49782721f5f9cd9f05ec801bb72eb187aa,2025-03-17T16:12:47.283000 +CVE-2022-49447,0,1,4b92e62e723973a9421bea8bd1d827deb86720c872bb0ba3f2e659b7921b9795,2025-03-17T16:12:39.150000 +CVE-2022-49448,0,1,8dc020f896934fdfc9d6a9a0ff66a9ca2ab3057722d7b5b57ee9c4282f12f7a9,2025-03-17T16:12:30.140000 +CVE-2022-49449,0,1,c55a377fbd4a3fc62e241e8eafd30f4c6b4e90cd8b859dc41767112f28ec07cd,2025-03-17T16:12:23.147000 CVE-2022-4945,0,0,20784b9d1103172e5d46b8cc80ea749a5a202a1d8d741e78d1464bc851f0caeb,2024-11-21T07:36:18.330000 -CVE-2022-49450,0,0,8dc89501ed2a38dff08d387287804af708a9146da2b65d9fd1b8b52abd2310e0,2025-02-26T07:01:21.390000 -CVE-2022-49451,0,0,f052acd8ef898e2e2ffd4a7fb12e16689637087796fec3ab30397a6487b0cf2a,2025-02-26T07:01:21.490000 +CVE-2022-49450,0,1,2e03a13bfcbd72e596df450af82ea6b67de6da3553025322f44edb6a4ab6d443,2025-03-17T16:12:16.943000 +CVE-2022-49451,0,1,2f423e974c923449955f57ff09028b5c0077551e63fda3b25a25ed2a0f767295,2025-03-17T16:12:01.790000 CVE-2022-49452,0,0,61c07b4c1e73f1ccfbb4cd1c619553798fff6c54d4db37fb245c3a583cb8e072,2025-02-26T07:01:21.587000 -CVE-2022-49453,0,0,74b39d4bdc86da40db4d6a642bc133b95a99c0bbfcf71b1b1d8e1ec526326aec,2025-02-26T07:01:21.673000 -CVE-2022-49454,0,0,f6f2a03c3ca97b306ac7a0ca77c1e88ab9bcde52604920a09e622631bf5fd849,2025-02-26T07:01:21.767000 -CVE-2022-49455,0,0,254f2287eb13abc25bd20a0dcfeb09c56b068bd98da806b8e5d7cf31cc1e6ad8,2025-02-26T07:01:21.857000 +CVE-2022-49453,0,1,d3fa61f87b35b0533fcd74a81126bab79c283eb0464e403da62939c710012fe0,2025-03-17T16:11:54.510000 +CVE-2022-49454,0,1,24e6ade456128ebbeb6fb594d591cccd603c4657b2c7c6d84392dd89f6e08599,2025-03-17T16:11:47.980000 +CVE-2022-49455,0,1,695e3a1a3947416ef0a99849b6f1eee0c9c61fb3e975094d12d5b75664ca5eb5,2025-03-17T16:11:40.500000 CVE-2022-49456,0,0,563c3f7f3b0329740dc4fab90ff930206615f045727efaa3740e291c77811a6b,2025-02-26T07:01:21.950000 -CVE-2022-49457,0,0,1b15cecdb52f0197b6e40c41b3555c1f47804f6ef46c6eade0451cc731373113,2025-02-26T07:01:22.043000 +CVE-2022-49457,0,1,78422c160dbcbb9819cfbf90bf85924ae25d2f9226b3f9eaa32c75381c486ae9,2025-03-17T16:11:28.843000 CVE-2022-49458,0,0,7f625f9a4a3446f8e9992368140745edb82f77fe05f8a75544199ad9dc8c1487,2025-02-26T07:01:22.133000 -CVE-2022-49459,0,0,06a7c6a3aa9e8c35ab36b3ce111b5e8a6ce1998fc0228ab200575f2357609061,2025-02-26T07:01:22.230000 +CVE-2022-49459,0,1,b5278c4c71c28468999f991244e2790e2006b9c544fc73f75007869f6eaeb95b,2025-03-17T16:10:56.770000 CVE-2022-4946,0,0,41fd8dc7f83b35220687a8d1d330ae53710d4c60699555a4ab3f45165abf6e79,2025-01-08T17:15:07.773000 CVE-2022-49460,0,0,c0ca53f2e7645a9533266d873f526216d2888f488f8ae5c9717450c998061d79,2025-02-26T07:01:22.327000 -CVE-2022-49461,0,0,8708f85204836c800386ceb93d4084d6f6c7c93f018fe44ef9b4ca0028047a17,2025-02-26T07:01:22.423000 -CVE-2022-49462,0,0,2d9ef0c040937485de4fe442495b914388690d785f50452577ae086220f8b94e,2025-02-26T07:01:22.517000 -CVE-2022-49463,0,0,6af664ad1a7dcc2b60242af0970de3a6686cf87502955f6775ca1d53e56d5a8c,2025-02-26T07:01:22.603000 +CVE-2022-49461,0,1,347801fb9396a47e2818e329d7a02f2c52a22bcfb82ef5498e00a27c60cda5e8,2025-03-17T16:10:31.453000 +CVE-2022-49462,0,1,6cffbe61251654ca534014e0fe3747af0fe4635508b126272ee128a13afe068c,2025-03-17T16:10:17.393000 +CVE-2022-49463,0,1,682662909f8b101996077e728527b2b3d8dcaa2c4b90fe679ddf6d2385db830a,2025-03-17T16:10:05.883000 CVE-2022-49464,0,0,e6ddb19317a9406dcd9a0f90ba2df98503c12a7816cceb250f401a90bdd88fdf,2025-02-27T19:15:44.470000 CVE-2022-49465,0,0,4f8c4bf67b93c09e09cc2d909a4283eecdc3c3846748704b72a56494a4cea9e8,2025-02-27T19:15:44.603000 -CVE-2022-49466,0,0,1b3f8a91c7c8d4e47da63911f2c35d580794e28c580204b719068f18081d04b1,2025-02-26T07:01:22.880000 -CVE-2022-49467,0,0,22afb8cada5ee61ff2079025f2cfbba9206a88ab3f057fb7c8f4171363b6b8f5,2025-02-26T07:01:22.967000 -CVE-2022-49468,0,0,87a05b1771818597510ab1ef1adef5e429dfb297080c4beb7aea0df8dc8b441f,2025-02-26T07:01:23.063000 +CVE-2022-49466,0,1,f7c5750ff078a0e98aa2a42bfe33f9a3c57312fc12c08b8171046b73472cb8c5,2025-03-17T16:09:48.893000 +CVE-2022-49467,0,1,4e53b9ec31fbc6a23204f44657dd66e4a53294e4e9e8cbb3aa80e98b6a4e5969,2025-03-17T16:09:17.333000 +CVE-2022-49468,0,1,29820571bbba4c95ba7f51afe48810f097f2d9a139ddb369eb71caccaa4f27d3,2025-03-17T16:09:09.383000 CVE-2022-49469,0,0,b5870172882f87e55113d0c0822fd763e69d1a72fa1006358d53ac85203176b7,2025-02-26T07:01:23.157000 CVE-2022-49470,0,0,4257c297d46fd3c369f1f6614c21c56d101422144377730beaa4c7fa5cb52ac7,2025-02-27T19:15:44.743000 -CVE-2022-49471,0,0,957447a533bf89a6a41e4a930dc9aeb57eac02f499e3b5c42d6b39ad865d9880,2025-02-26T07:01:23.333000 -CVE-2022-49472,0,0,9ec961e0bf0e680ba8bae89ac1a3d97e51c63b202474d2bd45f4cbdf62e02e29,2025-02-26T07:01:23.423000 -CVE-2022-49473,0,0,60dfaea0099fbccfef518290e5269848b2929db36318a562180510abb9dca853,2025-02-26T07:01:23.517000 +CVE-2022-49471,0,1,bb165ad1a64127f6cf2ac0f5d1e8f9f3eeaf5071c706e04b8c08350a5ca16ac1,2025-03-17T16:09:01.893000 +CVE-2022-49472,0,1,ccadbac9aa4237eb9bd042b3fe58dcf687badb1168fea3d5a85a1b2c9d75fd43,2025-03-17T16:08:54.433000 +CVE-2022-49473,0,1,9d6fe19954ee1d3a3c1b609d2a413d9f846549d0dae09c0a849b336e35a2aff8,2025-03-17T16:08:31.777000 CVE-2022-49474,0,0,c207a9f490aceb5fb050bc3d1f18c5a204816ddea5d0bd3de3457cccec57e20e,2025-02-27T19:15:44.880000 -CVE-2022-49475,0,0,d291860ba9606736f4674dd2add334cfde1f4ded40fdd668ddf5a30838c0ac2c,2025-02-26T07:01:23.713000 -CVE-2022-49476,0,0,9fbc9daafdd34a78d3aa4f30d3e877a0c72e4ae4a0dbdc9bf3b3d834f2f59f89,2025-02-26T07:01:23.800000 -CVE-2022-49477,0,0,ad330ee66e2de43fb9d2177b580661f2ded1bf4eb006e3ae0fa0a04e69b019e2,2025-02-26T07:01:23.920000 -CVE-2022-49478,0,0,66645b176ea7980f8678da14dcf0a80c0a9de9214d0434eab6e952a82ec7acea,2025-02-26T07:01:24.050000 +CVE-2022-49475,0,1,c8390a94b5fab238fcbd54328298105507bce09eb74a59c73e4dfe31e28808b4,2025-03-17T16:08:23.667000 +CVE-2022-49476,0,1,243349ad1221125f3e767f3630fb467007000b2716041a57b92a7a25d8ae58c1,2025-03-17T16:08:07.923000 +CVE-2022-49477,0,1,18b217697a34ca4dc0469a5b8143dd43699402f8c4de339055cb2be9b534f837,2025-03-17T16:08:15.377000 +CVE-2022-49478,0,1,7713eae42db704b5ecedf8fe21e1041675d05a6e2ef9e4fc8b6a805b5d2b042f,2025-03-17T16:07:58.500000 CVE-2022-49479,0,0,21b4854aef3e3085b45840ef35c4cc4bb542fc111ab30881629f4eab95092df0,2025-02-27T19:15:45.023000 CVE-2022-4948,0,0,3f06e3662375e23afad4aa4576d0c4fd807f6f0a60e20fd1d377539f48f1a48c,2024-11-21T07:36:18.570000 -CVE-2022-49480,0,0,8485bdb0b9a4fff28da292e41c3a7de39e2d89a003fb445f429ef2c979501c07,2025-02-26T07:01:24.243000 -CVE-2022-49481,0,0,29f47cfc7484008104509dffb9000fd0932a7010e7d111079b8d5d99900b1b73,2025-02-26T07:01:24.340000 -CVE-2022-49482,0,0,e18945fcf8a1fc8f56a55fdee868a180317bf9747a9ea2bb29c00f74d0ed007c,2025-02-26T07:01:24.433000 -CVE-2022-49483,0,0,94b1995bca6296fed66f86128846c9a30378e2b94da00adc3fe2d67b02afb743,2025-02-26T07:01:24.527000 -CVE-2022-49484,0,0,9b98b099cd44e391f3981e127c012f44b61589db7277d951ddc51d88a8f3cdf6,2025-02-26T07:01:24.620000 -CVE-2022-49485,0,0,6d1ee6e7b7486881fa384ed7f3d8fd982566095348640d701117cd0354f4c5cf,2025-02-26T07:01:24.710000 -CVE-2022-49486,0,0,5685850e087c5ed0f3d9c6a8439f47c72b24aea5bcc08a5c8c07143ed6ff9775,2025-02-26T07:01:24.803000 -CVE-2022-49487,0,0,7342586d1c88790408a18a2139b5bbeb9ddb0fe84e98797315c35309c086067d,2025-02-26T07:01:24.897000 +CVE-2022-49480,0,1,6dab5ce2e5ce7e99bc232dfbc818be93910e0dfa7cd3dc09f6f4fd6d495f9c9c,2025-03-17T16:53:29.907000 +CVE-2022-49481,0,1,8a394e73e98e426d99ff691ae15dfa3054dd91444a095440f48370cdac69acc9,2025-03-17T16:53:39.170000 +CVE-2022-49482,0,1,c7361822fbf1b17ad43f86004f378b6706fcd08e5f50a30532856644b17dab90,2025-03-17T16:53:17.220000 +CVE-2022-49483,0,1,38b5c6e8c35861d43e8242f8be9443b245b430638496f26e312caf08ceb25f33,2025-03-17T16:53:23.390000 +CVE-2022-49484,0,1,d860f26efde18f1f81fc4fefdf7257443c111f2160c530e007a41ce3f73c0e62,2025-03-17T16:53:09.257000 +CVE-2022-49485,0,1,258f53b66c477b3de5ae684793c30df715d0078e2d533aa5a88f1a0b94f6f4b4,2025-03-17T16:53:00.020000 +CVE-2022-49486,0,1,fe07a79386eb7d5d10b0907d4a1e3163b842c1f22ea46cdc9334bdb33688c21c,2025-03-17T16:52:52.160000 +CVE-2022-49487,0,1,d082432d913985248bfce528346b7ac8a2681abdf6124d9cc4729ba9bc8719ab,2025-03-17T16:52:44.953000 CVE-2022-49488,0,0,d4ab7a86aed378d42b8fb4229ee12f1aeccefb8cd2a4be3d8fd9feb72c0c3323,2025-02-26T07:01:24.990000 CVE-2022-49489,0,0,3ae95e28ed50c5f36ebc0501c87fbf6f5b23e2b31eaf5c24145b28a31ca89680,2025-03-05T22:15:34.743000 CVE-2022-4949,0,0,20ecd66c665d4a7df211e25b3128a2f7367a36b316ae054ac00474cadd4e5062,2024-11-21T07:36:18.687000 CVE-2022-49490,0,0,270aba9f6e63fa1a86f329a4fe7824becd52a6b355bcf2fe86c51f1659629503,2025-02-26T07:01:25.183000 -CVE-2022-49491,0,0,01ed1c93344fb76cb8435ff5a6133e6a5339653aa7646fc6c4d190121eea8872,2025-02-26T07:01:25.280000 -CVE-2022-49492,0,0,012321950f2d863ed5becc92dd27d67dc5030e26423beaf09f9363f3111707d6,2025-02-26T07:01:25.410000 +CVE-2022-49491,0,1,4b053e7df8bcdcbd34f3f3b92dfa73e68bd660c6efd8a2475ad2e21f5ec0e274,2025-03-17T16:52:36.297000 +CVE-2022-49492,0,1,01287ec37145564a90c6f90c0100b199d264ecfbfc1d33a68488e5def5f76f11,2025-03-17T16:52:24.447000 CVE-2022-49493,0,0,43d0f027f2a6d088ff6b2d3bfd6e7b98decbad12a385ac576770c70d0114106d,2025-02-27T19:15:45.153000 -CVE-2022-49494,0,0,4f9b6effb4c81426462525f4137bd222502df837711148839dc8e0e112654d6d,2025-02-26T07:01:25.613000 -CVE-2022-49495,0,0,4314c31e99f42611683a103c42c6e94523107c640bdc9a410a4c233b444c0045,2025-02-26T07:01:25.707000 -CVE-2022-49496,0,0,96d86559cb033927ac753c6f4109b8da6288af7a6b4aa1ab23e985f0916bebcd,2025-02-26T07:01:25.800000 -CVE-2022-49497,0,0,82b97e8843b3b1c049575dd74eeaab26a9f802eae143a0f416994c1a979ee591,2025-02-26T07:01:25.893000 -CVE-2022-49498,0,0,e1a728149da06d9b862a3093d15a492d342d7324dcd991bb0ce9782be2ce5450,2025-02-26T07:01:25.987000 -CVE-2022-49499,0,0,00bc99820c27305b27319f8ef9e0c1107907fec62f6838b9f8ef591a9d64bade,2025-02-26T07:01:26.077000 +CVE-2022-49494,0,1,86ae41ef6a2753309a3286e8b238bd21ab0e0d0a7f690fdce6ed061d4ad7fb49,2025-03-17T16:52:15.630000 +CVE-2022-49495,0,1,5955c1f9fec5d930c0ab2d590314d9130768bf15141997f4ecb5bcdea7b264d1,2025-03-17T16:52:07.033000 +CVE-2022-49496,0,1,2ba349d64a56140128562139e0f13f5610c24000d27250659e18996526541cae,2025-03-17T16:51:55.113000 +CVE-2022-49497,0,1,1cf29151b5965c47dc238a1b021b2d14f692889cce7e248ab12cbdd5bfdafc94,2025-03-17T16:51:46.490000 +CVE-2022-49498,0,1,52a4e93bc61ecee71c5f1e48ce3dcb530f97f30bcb0b675de8c7f96d8d3846d7,2025-03-17T16:54:23.170000 +CVE-2022-49499,0,1,529a3383e59045d617780947e54d16125e3f73d824341027470d986c68675eb6,2025-03-17T16:51:32.397000 CVE-2022-4950,0,0,553f8616c590a48d9a934a6dc8477b16541d05a5e26a41275fd32eff9d48e9d2,2024-11-21T07:36:18.810000 CVE-2022-49500,0,0,22aae1b54b346463da818c1f05eb7a354584f5e50ae3e9ebefa32dd67a8f4fee,2025-02-26T07:01:26.163000 CVE-2022-49501,0,0,c4d2a95277ed3ffaae7e144f0660da36a869b0db08cfb37d7ad841458fb87e53,2025-02-27T19:15:45.300000 -CVE-2022-49502,0,0,ec73027554d1d1ceee0eb94feeac7d45c49485613e74e2727ddd0c774e0b2718,2025-02-26T07:01:26.353000 +CVE-2022-49502,0,1,8abf9ac0ce36540fd41cfc279cc5f3b64a7b8b53369a2d15b68c0a6bcf003e1c,2025-03-17T16:51:25.637000 CVE-2022-49503,0,0,1b221d569cd7bd716071aad4a4aed8f1bd7d8bc5c4cb56eb1ca65fabf22247a9,2025-02-26T07:01:26.447000 CVE-2022-49504,0,0,dfc48315117767033b964df565f4dfe03374233694b8757abf6de9bfa239a000,2025-02-26T07:01:26.543000 CVE-2022-49505,0,0,a92d43b75e8f7f05ebacc5d029bdb0602a5ec909946d07552e56333b6f768c13,2025-02-27T18:15:26.007000 CVE-2022-49506,0,0,acd402e73d7abe7379b4837433d1bef2274c7587d7334939fc108b29de65c13c,2025-02-26T07:01:26.737000 -CVE-2022-49507,0,0,21ca20782b4c4eaa2a72c25a43e5beeb0d8b04f3242625e878baae5053faebd2,2025-02-26T07:01:26.830000 -CVE-2022-49508,0,0,3db354c630ff60ecbe9c5a72dbdd05fc030db4604d929b903df97dff4d5d3b41,2025-02-26T07:01:26.923000 +CVE-2022-49507,0,1,e22b5eed823447476938bad497a5182d5bbebad604b84a0b902ce2583e23caa9,2025-03-17T16:51:16.030000 +CVE-2022-49508,0,1,939a13933fdf7234d7891ea17e7812992a68e43d5f81ef4446a354dc179ecaf5,2025-03-17T16:50:15.920000 CVE-2022-49509,0,0,c42a19e06a551c87f16075cae083c8b6b30f2b4b4943ca0d85cf0b934e347240,2025-02-26T07:01:27.017000 -CVE-2022-49510,0,0,22ab710a58c6156367d30910ff9940198a1c40492d67adaf6967dd6efab93607,2025-02-26T07:01:27.107000 +CVE-2022-49510,0,1,d6b0e1b863ca667721215dc1840e2bd92bc86844e67b8ddd689ec57df1a54e6d,2025-03-17T16:49:16.783000 CVE-2022-49511,0,0,ac27032366a0f2bdc38f6b440db773845c9a1133ab4ffabe062a6277a39fa4d2,2025-02-26T07:01:27.193000 CVE-2022-49512,0,0,afb1bdc8c2d7d19899150691424c0820237aa728525d470207b9d1aa2dd3b215,2025-02-26T07:01:27.287000 CVE-2022-49513,0,0,ee2f15eae9aeb0dd25a03d8f2840529cb9b7dee0ba0101e1f301a18af3fad89e,2025-02-26T07:01:27.380000 -CVE-2022-49514,0,0,926a5b2a0ac57e3ca2394d9694a540c33d001ec6c1f058abaf174ef963358fbb,2025-02-26T07:01:27.470000 +CVE-2022-49514,0,1,984bc86afadd577b5ecb048be1e3e3829eb0bf548a9ce37974bcf94c92c5aba4,2025-03-17T16:48:15.700000 CVE-2022-49515,0,0,11f590a0390050966175d7feb25650014e735075d9da87d4d35d4eaf0315d8da,2025-02-26T07:01:27.567000 -CVE-2022-49516,0,0,608c59dca4bb73c50665928440ecd9fe2b087002863ceac7f6aaafdbcd76c6d0,2025-02-26T07:01:27.653000 -CVE-2022-49517,0,0,e12aa52ab55e54563c882e5c2ab099fee7fbab04f9eecf22d84547dec33cd11f,2025-02-26T07:01:27.740000 +CVE-2022-49516,0,1,d318c7f19861c4707a15c9f56525f5d0985dd10c5164539c7cb789029c81bf33,2025-03-17T16:48:02.917000 +CVE-2022-49517,0,1,0cd935d1c426bd7846cb73172ce216f0fdb70b3940d020fc0e9c5a8b3322b7b9,2025-03-17T16:54:35.437000 CVE-2022-49518,0,0,e2be9645f3105b2d0a168cc97ab53e860dedbbe3e7dbc3867b799d6d0c941f15,2025-02-26T07:01:27.837000 CVE-2022-49519,0,0,be3203cb79b2a17318b2c43dea6a6e5d8c5384c0354db6652cd09686cbf3bef7,2025-02-26T07:01:27.923000 CVE-2022-4952,0,0,7415f2ca4d823196175a3ec862b711ce8ea62fc540125d8d988ae7bb2051f370,2024-11-21T07:36:18.930000 @@ -213932,7 +213932,7 @@ CVE-2022-49730,0,0,bcd0d512fd3ed36ddef2f3abddb94ed4d94c9e1c8455cc41494485aee9ed6 CVE-2022-49731,0,0,831558e1f06d066bdcd53722be4168da2a4977f1014a464b1eb0286885be58fc,2025-03-07T20:46:01.040000 CVE-2022-49732,0,0,364e13a6491839d83af585411890da08c1e514679e122e818830d89fe163fab9,2025-02-26T15:15:17.843000 CVE-2022-49733,0,0,32f73869bf1c562f5b3ec290ddbcb7e24cf28788336a4ed241e4fcd302f309dc,2025-03-05T14:54:00.890000 -CVE-2022-49737,0,0,2da7977d977523dce28eb4f114a671d0638af6aacd891c8e21b409e9ec277323,2025-03-16T01:15:35.543000 +CVE-2022-49737,0,1,68f37be35c87e6632eaa4dfeaad0e5274348fdc377147f4515b3c041f52f3c20,2025-03-17T16:15:17.540000 CVE-2022-4974,0,0,b3c59950ee3eade0f74a15ade2edad03cf700537d377a12415779325d85e4da4,2024-10-16T16:38:14.557000 CVE-2022-4975,0,0,f3499ac468d9abe551aab7c55d7d6df29ba7ff95cc64d5206edf5add6a87fbd5,2025-01-27T14:15:27.210000 CVE-2023-0001,0,0,2dfbf6dbe59b530ec18f5af443ba14cd4d2a5b201d3a1ffcc25574a8da444091,2024-11-21T07:36:22.050000 @@ -214168,7 +214168,7 @@ CVE-2023-0236,0,0,93b9ecbdc65ce146aacb6eab9403ea81072a0a378646839d207a7ffa978021 CVE-2023-0237,0,0,405c9970d72a2f87744a75fdde8ef69782432c8a09001c02ae30c0cc410ac3df,2023-11-07T03:59:54.973000 CVE-2023-0238,0,0,9cd47a99706cd5893e472e737917ef5743f39a8cd657946bcd592784b0bb854d,2024-11-21T07:36:47.893000 CVE-2023-0240,0,0,383264b97ddf871acdbead92a50a521eb5d39e6e9d9224b766e1f4c2b89eda59,2024-11-21T07:36:48.030000 -CVE-2023-0241,0,0,cc9b240d3116fa8b05efcd2357082d68e70b2a574e3a280d0ecc8296778edfc4,2024-11-21T07:36:48.980000 +CVE-2023-0241,0,1,0dc7cf82dfbdcab76105bbe645aeab7982d16d47c66a5eaaebc1875427f9a211,2025-03-17T16:46:07.940000 CVE-2023-0242,0,0,e5316c19733ae6896d32af231882d40405b543cea3f9c798b6d11795fb1d5afd,2024-11-21T07:36:49.083000 CVE-2023-0243,0,0,25932e407032374a9bfea9031670c18acc758aecd1ad8167d6483a12884328a9,2024-11-21T07:36:49.193000 CVE-2023-0244,0,0,53747b1e0825cb0f578dbb1c7eb13ad253b947c2f6d2b1485211a0cefc46ca77,2024-11-21T07:36:49.320000 @@ -217890,7 +217890,7 @@ CVE-2023-22294,0,0,e63c253fb82735ed71f2472deed5038b062536fd986b3e5849e775af5efac CVE-2023-22295,0,0,080573c1487c2906a2a149688a6fe9721db8a960fe65097f1e9acb1a6a94e5a7,2024-11-21T07:44:28.483000 CVE-2023-22296,0,0,ace96801c1bd38ecefeb94f1c8cc56a96a773744b6dbce760ece5cd4401584e3,2024-11-21T07:44:28.607000 CVE-2023-22297,0,0,e2cfb145db1e3ffb902651a518ec98e6141d79673ccfed77db7cf2dbcc633789,2024-11-21T07:44:28.717000 -CVE-2023-22298,0,0,f6dc805831e3b12f7de9ebd55e11a238a6127133a62593b1508897e8f9f4cb83,2024-11-21T07:44:28.837000 +CVE-2023-22298,0,1,0bdbc2b3f5f95d1f9e4b05fc4f82a1f2e35ad7a29522db17431d2bc4b3aae230,2025-03-17T16:43:52.873000 CVE-2023-22299,0,0,84693ef0c7bb509df895e8bac855b156e0a311fd0ff082f7e19ad8e321dcec41,2024-11-21T07:44:28.933000 CVE-2023-2230,0,0,2376b593af6286fafded76ff5926b1e2b7d1ae9ecbf888641f9486885a8dfaba,2023-11-07T04:12:14.200000 CVE-2023-22300,0,0,dbcdd932d1d304d05b27d88d5f52e3ef46ee88dd096a5519f2d41c93013439bc,2025-01-17T18:15:19.947000 @@ -237038,7 +237038,7 @@ CVE-2023-46980,0,0,dacb1018c155a0147f0608fc0394f59dd8f2f2f0512e453c092745a2746dd CVE-2023-46981,0,0,026350644202b54d0cca0c15982b2b92ecf956938336a88c9fa0604ee3f1ed5f,2024-11-21T08:29:35.663000 CVE-2023-46987,0,0,229a1f390d396188d389c42c1c5da39c22ec617d23e459a8ad14ed7bcc5123c4,2024-11-21T08:29:35.810000 CVE-2023-46989,0,0,45791d629ccc30ec38a0335dae48670585df4009011aeab0a1590f09dc4ec070,2024-11-21T08:29:35.957000 -CVE-2023-4699,0,0,740e277a54e0acc3520a5c92f81cd2f74f92cfe7fcbeb1d6f7259a920c2ef211,2025-02-26T22:15:11.913000 +CVE-2023-4699,0,1,65e91627f3db2e81b2cf04839985e20c3b1b4c4eb2f486d5e0771b5eef9626df,2025-03-17T16:15:18.850000 CVE-2023-46990,0,0,160645d54c54d888c229c9d1c24711089a9818f72a67e4f52929e8b3e327db4e,2024-11-21T08:29:36.120000 CVE-2023-46992,0,0,f27898b67cf914868fa161d7ec97867df86b85e8333a6ae417315924c04c0cd5,2024-11-21T08:29:36.267000 CVE-2023-46993,0,0,6911f0a691b4fa50d713044f64c8bcb2db3c51a014f0aa6b615c61579847bd28,2024-11-21T08:29:36.500000 @@ -239327,7 +239327,7 @@ CVE-2023-50011,0,0,c145ed175ced09124989fb0d5c0560e5d4be3fc7d3053a21b9fb20dd3ee35 CVE-2023-50015,0,0,81d964821e2816fe2561e9089dee93e252d3d542d5e7f85273c1ee10dfab97b6,2024-11-21T08:36:27.550000 CVE-2023-50017,0,0,96df0348a505f917ffed422b82173deffa45385055ad565f5fae0e0f776722e3,2024-11-21T08:36:27.780000 CVE-2023-50019,0,0,9cfe2dbdaa845fc899c52a8c548e3aa2aef5101b1aaad3fb60b85318c5e52671,2024-11-21T08:36:27.937000 -CVE-2023-5002,0,0,d017c67628cedc142de628c96b1fca2fa042268dcafa244a68fb35b4cc665ac5,2024-11-21T08:40:51.867000 +CVE-2023-5002,0,1,987bc6cf7338c0e2792735e9cea7dbd327df20b8bcec6e3a4dcd230105906ca4,2025-03-17T16:43:52.873000 CVE-2023-50020,0,0,72f019b0b67d78b3e19cc9985f2bbcc228431a3d95399a3b630e069fbd7c9428,2024-11-21T08:36:28.110000 CVE-2023-50026,0,0,c92b5b85561b619a5efc7f3d419d3c2e27b82b5e6c8d2ca26791f382db769876,2024-11-21T08:36:28.267000 CVE-2023-50027,0,0,a9df9652fe85e440e14297428e35023f622e0d6fad228e66bd9862e8e00d25cf,2024-11-21T08:36:28.440000 @@ -240886,14 +240886,14 @@ CVE-2023-52311,0,0,07b27b223edc881f838e5041ab4820aa11b67d3aa5fb21bb9ad1631b9e294 CVE-2023-52312,0,0,be9b30bd5d9e24a7af438dfcda27134b3bf8acb826fbec3d0d7b0b2f87dad2b4,2024-11-21T08:39:33.367000 CVE-2023-52313,0,0,55f37c159831f0ca0adfe00c975bfc39d684698f05db4d6987a1029f9b979e55,2024-11-21T08:39:33.507000 CVE-2023-52314,0,0,dd060fa032542509548ea27e1510da7d85bdaece86e74ece4ab4024a1ebc1b14,2024-11-21T08:39:33.627000 -CVE-2023-52315,0,0,924d1c1deb9b9d0d737147c8ddfb373db2392cc6f93f2280420845f32d7c96ed,2025-03-17T07:15:33.250000 -CVE-2023-52316,0,0,2d0a337cdc5784ac0523d3c39dfbc4845120ad76e5c7b2770bfd75e9895bf016,2025-03-17T12:15:12.127000 -CVE-2023-52317,0,0,ac4385dc8c3bf57c336afa067e1ee89c225d337e9c312d82531ba0e5541f8b5d,2025-03-17T12:15:12.843000 -CVE-2023-52318,0,0,666a9fe14beef03cacf81597ffca670292cfc9ad329225847f7863456706f0df,2025-03-17T12:15:12.923000 -CVE-2023-52319,0,0,2a0847d66678047741f3a8c8b89fbe2515b452bb21a30e7a96d065d6613d74ae,2025-03-17T12:15:12.993000 +CVE-2023-52315,0,1,ea2c39f0b5de14fff549997f6104f0057d25147ed7c202f549d084d40987db1b,2025-03-17T15:15:39.193000 +CVE-2023-52316,0,1,4e4471dff0e9e5c1ebed51f50e45b49fc6a2f49a8da32c0e61c5ca1b7437a6f3,2025-03-17T15:15:39.247000 +CVE-2023-52317,0,1,da9c5603f9a332907074af267f8ec016b4064bc9428d48f0b2b9911c343835bc,2025-03-17T15:15:39.297000 +CVE-2023-52318,0,1,0aba1a532c904cac36b8a632daaee1f9e6fbcc39982c02bbe1872bf7c6b44aae,2025-03-17T15:15:39.347000 +CVE-2023-52319,0,1,e326bd10ab372e5dbfe110c4a0b261c9e4031b82a33e178aef38287157eaaa8e,2025-03-17T15:15:39.393000 CVE-2023-5232,0,0,49a427ae480ae124affbf449399e7da8cb8fe56219272eccdd509d95d18e123f,2024-11-21T08:41:20.480000 -CVE-2023-52320,0,0,b0c0d26b3c508722bccbecb18e2bb742225755452943f34e8a0b7de262ab0222,2025-03-17T12:15:13.067000 -CVE-2023-52321,0,0,b9fc329ba3b12669e0bf4b0cda357438ba75ff321d9a214ce08790576de47751,2025-03-17T12:15:13.137000 +CVE-2023-52320,0,1,a2e3835f942e704e7c041ec1f0aca2a58e4519b09723d16cefab2c2944110b3c,2025-03-17T15:15:39.447000 +CVE-2023-52321,0,1,38b2d25260232018ddee415ea22e9f2d56eb76e7ddf63e8dc4ce3183ee974844,2025-03-17T15:15:39.493000 CVE-2023-52322,0,0,5a514ddc56e42aa70ee9fde3f16bc6524f527a148576f5d3847f0bbcfaac59b3,2024-11-21T08:39:33.753000 CVE-2023-52323,0,0,08475ca63860bd34bf2ef591b2be91ed9160e70b5e3785d352a5c423089d5803,2024-11-21T08:39:33.907000 CVE-2023-52324,0,0,035ffc7f70ffc2b770527efc47bec9d217967d23ca88c6ac175635d8eb0b5b03,2024-11-21T08:39:34.067000 @@ -240935,7 +240935,7 @@ CVE-2023-52357,0,0,c90b8cf2c9fd4f0bd5f3a1801bd62383f3576028919c434b9e3c4930a4953 CVE-2023-52358,0,0,caff3a3cceeaa9f53391afabc8456e4d7818c60c58df2a6f9a8d9ac878bf0536,2025-03-13T14:47:46.747000 CVE-2023-52359,0,0,8ae1056b22034998b04b67b0579601edf1e0c814a8ae597fc84e8da5336dd7a2,2024-12-09T18:03:10.427000 CVE-2023-5236,0,0,fae9024cc39ccab3805ebac406973d2b89825794dc9b312a2a604ded9d2e85e7,2024-11-21T08:41:20.950000 -CVE-2023-52360,0,0,3175f4befe0991e151df0b151f6a6aa78146eb65d398b0d703a9719ef4c13251,2025-03-13T14:48:00.200000 +CVE-2023-52360,0,1,226e23600ef295082458c88722bbff585b570a1b29c169a33a3ea276579c74b8,2025-03-17T15:15:39.547000 CVE-2023-52361,0,0,e8145c184aa1d630e38e5e391cbf0efb13b269936042053c6de8ae608f61a2a3,2024-12-09T16:15:19.790000 CVE-2023-52362,0,0,cf91df3e15a338249de10c7aa64ddec392a68622c092822cf8470c2fa34743d6,2025-03-13T14:48:14.840000 CVE-2023-52363,0,0,1efc93ff27c9e0ed79ac4263a98c1d302ac42e2af529ed93771693f4205a393d,2024-12-09T16:58:59.567000 @@ -241191,26 +241191,26 @@ CVE-2023-52618,0,0,a284d66a0a173675b029b5aee3ada2aa13bfa94d23d149bbf9319a57e5073 CVE-2023-52619,0,0,0d5348273b1dd6132d59d6103b7e85c4edb4275673ae4b525ade634b5ec8c2e8,2025-03-10T15:48:56.520000 CVE-2023-5262,0,0,f12d27a611a8ec27e96df2726c8954646b355ec2142282b02264062a900d1e58,2024-11-21T08:41:24.097000 CVE-2023-52620,0,0,0eb70ac132507784a8c1da368ec59135c0ed7eca192468960b398b7bcc9d56b1,2024-11-21T08:40:13.067000 -CVE-2023-52621,0,0,8591fd357221d399b0d87d6f731c301ebf232e8db314e07c28b683802e3f0d74,2024-11-21T08:40:13.260000 -CVE-2023-52622,0,0,0d48ba6550d3d7d01d0b6cdce46c8fbf616108a8f8c84a52d6447ea12d817bbd,2024-11-21T08:40:13.377000 +CVE-2023-52621,0,1,219bd776e6e5d3d91f65c44efb87258a95f903234f85deaf82c58e453f46bed5,2025-03-17T15:20:01.240000 +CVE-2023-52622,0,1,75ea7e76144e294976dd2b16b360b068f5e69fa0d4d6f0fb7200553ea26a4cb3,2025-03-17T15:19:52.373000 CVE-2023-52623,0,0,1fb9999cffc51a59ae798eb79d8c2a54bea9896e2a18a1ff22d36ea0944a27ac,2024-11-21T08:40:13.507000 -CVE-2023-52624,0,0,d67e1705aa4abd2c5b9160c02fac9be38292736b2df7305dffc272397188d9e0,2024-11-21T08:40:13.703000 -CVE-2023-52625,0,0,144a5af489bb3c77fb55395376fc8c96aa75e3416fcb79c60dd257f773309e71,2024-11-21T08:40:13.813000 -CVE-2023-52626,0,0,463c6951b913a26626c40a329d0091c6f41095efaa46010013f52b1b09261f85,2024-11-21T08:40:13.930000 +CVE-2023-52624,0,1,98e72b581191e29118fa1c89adbf60abd3bebf0b4dbbef333bcc0e53d3126be5,2025-03-17T15:19:42.927000 +CVE-2023-52625,0,1,d00ce206402348c1e8dfed55a457bfd186051d322171818247e0064bf0acddbd,2025-03-17T15:19:34.277000 +CVE-2023-52626,0,1,dac91148ba6fe2abc0db519a71410013a94a0d9f29901030eede33be206dfdeb,2025-03-17T15:19:21.573000 CVE-2023-52627,0,0,a056a3a8f7364aae9ec024daa399ef5ce0d23971c8439cbd8a7902e40ea1e590,2024-11-21T08:40:14.050000 -CVE-2023-52628,0,0,743d4a78d5ed911b44a069e5c6b7e0b25d576580ef4842bbd8730742958a3b04,2024-11-21T08:40:14.240000 +CVE-2023-52628,0,1,3fde007300ab8339b5de4c0f6f892ef6ece799b0d0620cf6d8add943a9905090,2025-03-17T15:18:34.223000 CVE-2023-52629,0,0,4397575617d15536dcd5f735ff905b76dbe7f8e0b9055c01509a8f500872b6d9,2024-11-21T08:40:14.360000 CVE-2023-5263,0,0,cf79e50f0f1b7619076e68c8fb3bbd8b2a6a7fa96228c9cab11bda71fc305d13,2024-11-21T08:41:24.237000 CVE-2023-52630,0,0,c87212efbf5139852fd7e71805df929a746c8df75c9ee82e120adfee45deba78,2024-04-30T09:15:06.730000 CVE-2023-52631,0,0,2ea7e2ce9e6e65631282b310b2bd5c16cffff4054cc91f7639bdc3dd1fc81e9a,2024-11-21T08:40:14.577000 -CVE-2023-52632,0,0,b7d59c45b29b4ee0e6003797685bb50e932fdeda2b056c405259cf985b724d45,2024-11-21T08:40:14.790000 -CVE-2023-52633,0,0,c6d1ad72d141c6d5705bfec0df4607bcfe32fa8c2e14c5c847d3fbaff1dd3ed8,2024-11-21T08:40:14.913000 -CVE-2023-52634,0,0,a2a83cb4aac427d0edd2e6cde93fb6b83b83bffe2f1376d5e3fc016641996886,2024-11-21T08:40:15.037000 -CVE-2023-52635,0,0,fff24f5cae3618dbabd26a9a34aa3090594676e011e0ff71ae525d3edd776ba0,2024-11-21T08:40:15.147000 -CVE-2023-52636,0,0,712aae41a47ec3796a832e5830b8f968163d77aeecdd00e3d29a344879d9131d,2024-11-21T08:40:15.277000 +CVE-2023-52632,0,1,855ec21292ea67ea0831b14c455b82d8e55976b6f6debcba7b811d02a12bbb9c,2025-03-17T15:17:57.207000 +CVE-2023-52633,0,1,1fc7053c4bae8b11c9899de6a229c64850185e6c7287d597362701af2fe02ad7,2025-03-17T15:17:46.350000 +CVE-2023-52634,0,1,0bc00625ba7edc0271a83000c51b6388315859295113da51130f53ad9c7e3d8a,2025-03-17T15:17:36.907000 +CVE-2023-52635,0,1,20add79a844bcac05e264cb15de2eb7cabe0bd8d6c820258c7c8cfec03dc02d9,2025-03-17T15:13:50.523000 +CVE-2023-52636,0,1,6891feb51b00a841d2634e3880fafc1619c6dda4542255357b3e08ca573c9feb,2025-03-17T15:13:38.217000 CVE-2023-52637,0,0,6525471408a491031c4de1ae8f72983964f519e08c54239f19df671c1d6ab72e,2025-01-07T17:22:33.383000 CVE-2023-52638,0,0,20a013aef68eb0d77ac7b5a8af822be927436c665af725c4c31a359a523132cc,2025-02-03T16:16:43.840000 -CVE-2023-52639,0,0,a85babed92f16d3f3ca46fc5e767489574cdc77020395a5584a61852ec046d0a,2024-11-21T08:40:15.663000 +CVE-2023-52639,0,1,579dbcdfbd6af13a51f85bf72840c1b4fc290f95ccccb50fdb9da28a6c9e017e,2025-03-17T15:40:20.033000 CVE-2023-5264,0,0,3e616cabf1a089b6e6cdd95ca27e570fd2ac3366b640b4e1c4e5769bd4fd0c47,2024-11-21T08:41:24.370000 CVE-2023-52640,0,0,8ab36630cf2f06b00061ad38b52fee04b65f9a53ce446d61a91aac4f6928b553,2025-02-27T22:02:14.217000 CVE-2023-52641,0,0,592af7f4c429865af31c53495a7c752ac71766466d99208a5aded5501f7c7deb,2025-01-07T20:18:38.497000 @@ -242284,7 +242284,7 @@ CVE-2023-6076,0,0,dfb574e1fe28cdebb4ff91d845a6112202e63f16b630ce6f70b0c2fd62a522 CVE-2023-6077,0,0,32229238b1b943e0ce5372f2504438d9115b6c22751b6654a0d7b79845019894,2024-11-21T08:43:06.013000 CVE-2023-6078,0,0,b599c4a94de923c442421c48c7cbcd88b18b48ccbbfdac8709913b6a96e89421,2024-11-21T08:43:06.127000 CVE-2023-6079,0,0,b8f1006a826661ea0e917e1a7d7f47f594110ed1928962517b4919ba2ad7c6e5,2023-11-15T17:15:41.840000 -CVE-2023-6080,0,0,4c5bef52d85901385c998027eb18ca255ca7dfbe985d5bf08bd0ec4405bd2763,2024-10-30T20:12:50.090000 +CVE-2023-6080,0,1,90c775881d0fafff20861cd583e65eb04e5f6b6bfd3847893bb6ac26f621e731,2025-03-17T16:15:19.670000 CVE-2023-6081,0,0,e15e74e818b7a16c6c9943fc7019eea1e66b61673cf0b0c747b11dc0b546bf78,2024-11-21T08:43:06.410000 CVE-2023-6082,0,0,aedb73a5991853d455dd8827a3d20609e07c498665fa99f24ba94dafa8fa3428,2024-11-21T08:43:06.527000 CVE-2023-6083,0,0,d1560627dc68f7b1a426ece78a2c5533b729fcd47dd7569b2120a5d6118d44ad,2023-11-14T00:15:08.847000 @@ -243596,7 +243596,7 @@ CVE-2024-0254,0,0,c1612747581d3e972d8836ee2e7c3b7f7050524764412a99ad73d901e76613 CVE-2024-0255,0,0,2b4f2952912126a11ab2f4c82b39c852abbccc37f69b3253ef2f6948ef6db9c3,2024-11-21T08:46:09.590000 CVE-2024-0256,0,0,ef649212c3141e55d9f9266cf41ea0c37a76cbe58d603f6e8d8544932391c814,2024-11-21T08:46:09.720000 CVE-2024-0257,0,0,2a29ab5b4fe3429af0833962262d4b144db2ed05bd01f991c8f2fbaf56014f51,2024-11-21T08:46:09.897000 -CVE-2024-0258,0,0,de598a8d9a48f3dbf7d42462a59473fd720120a03255d63cc2f75dd01e58f92a,2024-12-05T17:02:34.657000 +CVE-2024-0258,0,1,ef814522a718db0278f83c86ab9fda04c71ebcdf58fd4cb29ad2bf3482382209,2025-03-17T16:15:20.277000 CVE-2024-0259,0,0,d847db1ec75c408865a8123d7f48d6965f2b5f39223c04d3cf9c318500f97f23,2024-11-21T08:46:10.240000 CVE-2024-0260,0,0,fbd1badfec3edf6f577918800705eae70e3e36641f7e50006790d8fc9a955a92,2024-11-21T08:46:10.367000 CVE-2024-0261,0,0,02bcf9b6330a58957e06ebfb78ff942296a8368ce026b0bea6774731c75554f5,2024-11-21T08:46:10.507000 @@ -246727,7 +246727,7 @@ CVE-2024-12599,0,0,7841aa2cabb81cfeaf615313cc1e2889a6d6eea8a687177d6e98089597c3d CVE-2024-1260,0,0,237fdcd6650ec6f817190c6cbe0c450181ce5f478e263f9f314859cdec5f8244,2024-11-21T08:50:10.880000 CVE-2024-12600,0,0,25cdf4243a182c8f825652731ae4cdb22588842da143c4d91d8fa5b7ce66367f,2025-01-25T07:15:07.807000 CVE-2024-12601,0,0,f9b91f2d20d6914a3b5ca3c9af2a431f615ff9e20926a30171bf1c35967a6eba,2024-12-17T12:15:20.543000 -CVE-2024-12602,0,1,83ff0b84c52513b06515c71947664c6af329bbac5217b6b55ffe20fc2f9da714,2025-03-17T14:19:31.137000 +CVE-2024-12602,0,0,83ff0b84c52513b06515c71947664c6af329bbac5217b6b55ffe20fc2f9da714,2025-03-17T14:19:31.137000 CVE-2024-12603,0,0,1329ad6d4bb1404a279e066983b81ffbd19fd699c3731f10f6b510964794facc,2025-03-14T17:15:40.923000 CVE-2024-12604,0,0,a6f4270c625ae221b7f85c4bc776086e42b147f47e8fbeef861cbdbdca9ec761,2025-03-10T15:15:36.947000 CVE-2024-12605,0,0,a0f2993b097a4c99b97e822aef9d508fcc987f27fa00acaa2c8fa4c5ee5e87b3,2025-01-09T15:15:14.150000 @@ -247633,7 +247633,7 @@ CVE-2024-13574,0,0,7be8bceac9d88b207e4b9db9d8994c990cb907fc89cb1259a30db0eafc5c5 CVE-2024-13575,0,0,16cadedde273d2e44dd03e3555b4c264bb672dfe1040b3f8027897e23779bbe3,2025-02-21T15:35:18.820000 CVE-2024-13576,0,0,48cc32358acb541ca620ae43d659608cb24956f0ab7ef76dd6f13e11fb588a30,2025-02-24T15:42:32.780000 CVE-2024-13577,0,0,7ec226add5baf80fe65c72cfac22716a4ed179a333ffd2c2c08673fb55d268bb,2025-02-21T18:34:11.867000 -CVE-2024-13578,0,1,3fa75b1950e294b3acd6749f73f732c46fa23666900fe7fa74dfcb758cb0c803,2025-03-17T14:01:43.960000 +CVE-2024-13578,0,0,3fa75b1950e294b3acd6749f73f732c46fa23666900fe7fa74dfcb758cb0c803,2025-03-17T14:01:43.960000 CVE-2024-13579,0,0,9640388d79eec1df931f220b7238300cfc32ad9fa9f52686d215010fe1b6e407,2025-02-21T18:32:31.837000 CVE-2024-1358,0,0,c4ea31b36cfcd7f75873d740d9e38ca70692f76dad02370c8ddbe488b8025229,2025-01-17T19:52:41.687000 CVE-2024-13580,0,0,8c18468a378951f58d094eb32c15fce7e165d3a8d94c3e0805347be8c25abbdd,2025-03-11T15:15:40.683000 @@ -247658,7 +247658,7 @@ CVE-2024-13599,0,0,03405f2c3d79b505fbb84b1ff3dea79fdc81e050ef9a41f4a5537eddbfaf0 CVE-2024-1360,0,0,d34fec545a10bf09bb924f3a0696da0f2401b54143d8aefeb9f97ea01bb8486a,2025-02-05T21:46:19.363000 CVE-2024-13600,0,0,484c9129acb282fae32ab7c653ddfde69cea1c6dd837845606bbf7ace7ea91d5,2025-02-24T15:56:30.290000 CVE-2024-13601,0,0,ce9d6d51221b1f7bfe13b94be0c882b344de68bb5f35f70de286ecadc3834f44,2025-02-18T21:31:43.250000 -CVE-2024-13602,0,0,eff8656ada9a6de3209e3e98b37f75f9c0d405bf3b253e3878e70aefd9ce6ea6,2025-03-16T06:15:12.467000 +CVE-2024-13602,0,1,668a7c024e53e2fe8cff8603230bbbed795e1449bece0c1fdfb0cf7e8cc00f99,2025-03-17T16:15:20.623000 CVE-2024-13603,0,0,fc202802068da8bc55cd46c39e4a97a0db9f2a327bd5fc1b7575fa3aa107cf47,2025-02-19T14:15:29.070000 CVE-2024-13605,0,0,c1e9596b2279389a7bb72258053b1d4f5a9128f48e9acd3ebaabb715a0ba3f54,2025-02-24T12:15:11.047000 CVE-2024-13606,0,0,3678a6b8c1379d0e1b01e3251fb76bf1b3c0d7e3ee42e4cf605940cc5ab858d5,2025-02-18T18:46:05.887000 @@ -247671,7 +247671,7 @@ CVE-2024-13612,0,0,b4eebc3a0ba94cd7de5a857ae3d4519c3aaa03da31361c68d970a3c283ce2 CVE-2024-13614,0,0,e58c8adf8c29e7e85021326638f400d4333ddf67f47f6ad8c608c33ab2021149,2025-02-06T17:15:18.080000 CVE-2024-13615,0,0,908273225789589c810d445bf3ded2b50d27ce17d0d3662c40d421130be8688a,2025-03-11T15:15:40.840000 CVE-2024-1362,0,0,1bf34831bc70bdad1bc996e752545d1e0c7befef2013c4482e56f5d7529aa921,2025-01-15T18:40:30.490000 -CVE-2024-13622,0,1,9eed0ba9ebfb0e518b42a2712cf92dae96162849ad9816e57eacc260ba8214a4,2025-03-17T14:11:30.240000 +CVE-2024-13622,0,0,9eed0ba9ebfb0e518b42a2712cf92dae96162849ad9816e57eacc260ba8214a4,2025-03-17T14:11:30.240000 CVE-2024-13623,0,0,46a09ae0be01707a027ecd2168a6150e19984c64d67b3517affe48621dcf728f,2025-01-31T07:15:09.830000 CVE-2024-13624,0,0,6cdb4100029ffd4eabdd8728fbf145a99df48ac4e466074edace2c27cb68eb0f,2025-02-26T16:15:15.353000 CVE-2024-13625,0,0,556dbc652a367567d8dc0a1aca4ef96fa3721288585ae7ce8b84a84c5a8c12d9,2025-02-19T22:15:22.630000 @@ -249346,7 +249346,7 @@ CVE-2024-20995,0,0,6ed2242d7716dfd1e6253bb29627eb76de926858a7ab1e2b070bd4dab8d39 CVE-2024-20996,0,0,b2214e45a8111feb4422068a82cf89b311b12018dca2547ff883e436044dd851,2024-11-21T08:53:35.160000 CVE-2024-20997,0,0,00b5bee0a92c8ce2f26c85009ee13b80eacd0a4368b6d611c7d705d126590999,2024-11-27T16:36:39.907000 CVE-2024-20998,0,0,272beabbf7db98bce5fb18b72835e4b87a02a7b40a9768e47501cfcb88a63b5f,2024-11-21T08:53:35.400000 -CVE-2024-20999,0,0,94f28708846878583fab4de0d6e0091611b8a54e476d9d8197494256eee33a6d,2024-11-27T16:36:14.473000 +CVE-2024-20999,0,1,0cc5cbf9810dff5f99c9a8ae6464640e977d2cb344311437f5a19fb06f3af354,2025-03-17T15:15:39.887000 CVE-2024-21000,0,0,59de69bd33f2809fbb570f6d74199181e0714ff9a564d1c081dd26969bd2b074,2024-11-27T16:36:11.717000 CVE-2024-21001,0,0,b90351788d5fe9ffb09dd2e189df29b973976293492bdac48270077135e6f3d2,2024-11-27T16:36:08.477000 CVE-2024-21002,0,0,acbcf2b77c5e9aef3c722c2851e5b55c9dbc45865ecee4cd7c315b1686d445a7,2024-11-21T08:53:35.840000 @@ -249358,11 +249358,11 @@ CVE-2024-21007,0,0,19d4839f8c0c4494be18be45f38a468212164a7bf22822a55cd6a6c1093f0 CVE-2024-21008,0,0,11376e5194909d0d610f42d3afb489a3fd0d27f60a2c196da2976927ecc2cb39,2024-11-27T16:35:56.737000 CVE-2024-21009,0,0,af812c5e8a84169cfec251c1e067fa25e23db6feadfa3217596d3dc669751ab0,2024-11-27T16:35:46.023000 CVE-2024-2101,0,0,eaf4c1131c83288640046aa42047193f9fa8494315828e28602c8a67e1d6166f,2024-11-21T09:09:02.193000 -CVE-2024-21010,0,0,19abf29a4e38e4c95d80dae24dee76252b2715897d27ba41342df955b035cea4,2024-11-27T16:35:37.613000 +CVE-2024-21010,0,1,d4ee81a245c0049810e518b979f4fc70d1123453b01f841930b9fab863bc4aff,2025-03-17T15:15:40.073000 CVE-2024-21011,0,0,a46e5658273d6319443d01f0663a109447cc17df5651b379924f885eeb02f952,2024-11-21T21:15:17.520000 CVE-2024-21012,0,0,523d04602536c0847fc672427eb68c0722abf701b6bdd6d27ce8bd72e6d2a964,2024-11-21T08:53:37.010000 CVE-2024-21013,0,0,b4f0c00fa4df3c96c0099273b302588ebc333a301270281c7c230f900dd0918e,2024-11-27T16:35:24.993000 -CVE-2024-21014,0,0,e769f407a5fbaafeb1edcf284a4f6c1ff0d6b259618e468586d67b24879dec8e,2024-11-27T16:35:17.047000 +CVE-2024-21014,0,1,0bb1ed432046323ca103c387c101966eb71d53a1d903196a04179fc9be83f5c1,2025-03-17T16:15:20.833000 CVE-2024-21015,0,0,20b21163531b6be22e1a259ab8b8f210a4a8c811623faee5c7eb185de1959908,2024-11-27T16:35:00.387000 CVE-2024-21016,0,0,5808b3cf4e0616bce1a906c6dd1c87833f90a139f4b6ed66e3a1f9a1d2789156,2024-11-27T16:31:47.750000 CVE-2024-21017,0,0,131bf7f6dcdaf45e79638fd18bc21cd4d8e6d2da854ef4a48ac6c2918cc2b8e3,2024-11-27T16:31:43.653000 @@ -249436,7 +249436,7 @@ CVE-2024-2108,0,0,a4f4b9a0179c07c7e676877873289dea154c497d1dcd04e98f4da8de037b9a CVE-2024-21080,0,0,a65c0c4668188af36e422f62ea75622add9fbb9b8eb3983757ca5b6c0be0be18,2024-12-06T21:12:20.787000 CVE-2024-21081,0,0,6380f468048e59bace091a0b7f5e8686c1d284d26e8c604b666aa29212eea785,2024-12-06T20:59:06.987000 CVE-2024-21082,0,0,006aa04073fe1d26dcd3d072eaa958461fef885429ca9cb689bf991aa26981de,2024-12-05T15:17:52.217000 -CVE-2024-21083,0,0,6708379b61d580d63f1547513ad744551540cfd48156fd836ce4cc2bc20dde2b,2024-12-05T15:17:58.973000 +CVE-2024-21083,0,1,026df0f4b84fb9151cce646faed70ce7c33296b62eab668610760665e924a3dd,2025-03-17T15:15:40.223000 CVE-2024-21084,0,0,fe95f272aee0585e1240308420d9760ee2620efe5de0a84390061b345862a2d9,2024-11-21T08:53:45.240000 CVE-2024-21085,0,0,924dd6c17b7412be3321880650286afd1ef0721c2192503561e5a1d437670f10,2024-11-21T08:53:45.350000 CVE-2024-21086,0,0,1143a3ce077de383e5ae37e96dbc13c15c6fe7ec9cf1072484534a37f71afd85,2024-12-06T20:58:09.767000 @@ -250022,7 +250022,7 @@ CVE-2024-2168,0,0,1cebe73f3011b978a5288004a4a6b31a8a0e94ae0fa75e68fba72d9bfbe47d CVE-2024-21682,0,0,8bb61947984cae5bb4520771f49e37995b50b5ebd67c790b545e94a6039060bf,2024-11-21T08:54:51.163000 CVE-2024-21683,0,0,0138a14cab5cd983947b65c119f865cc9fa903bddca6894cfddf60a14c16ab92,2025-03-14T21:15:36.697000 CVE-2024-21684,0,0,4b2333e2512707190c29988a522c4ec0439292c692042fe9b25ab7fda6a4930b,2024-11-21T08:54:51.503000 -CVE-2024-21685,0,0,3c4c971d45d65495f5592903972ee9cd75db6eb0dc168987da35ab904c4102e3,2025-02-19T16:00:53.703000 +CVE-2024-21685,0,1,346bc4b5792cb2032fa2d12dece43f65235af6cb4059de4b308aa50e2caa89a3,2025-03-17T15:15:40.387000 CVE-2024-21686,0,0,0d4af5eeb52a1b56cf89baffd989a415c4ed1853dde7091d90226451bf24db64,2025-02-13T17:09:31.977000 CVE-2024-21687,0,0,8560b35c67088dcd0ed16945b654268ae56b1f595e022431d10a4b3886c70b5f,2025-03-14T16:15:28.963000 CVE-2024-21688,0,0,5b8415c8724c6d841bc6d9d4e0c517ae2ecd0ff5c1fbdac85271979721c9c3d9,2025-01-01T00:15:36.373000 @@ -250338,7 +250338,7 @@ CVE-2024-22051,0,0,75b6c443eda23ec7c8c394f9eb758dceb0558efa279bf487d8d0429231c0f CVE-2024-22052,0,0,fb73937d7972ce431af34c9c065dbcdabf7e31300916b9f35e3aabe9a5b95c49,2024-11-21T08:55:28.100000 CVE-2024-22053,0,0,6223f7c4e20f4a3638f13269fe1da50479ec1f14fc3364892d43d4a908a5a57a,2024-11-21T08:55:28.270000 CVE-2024-22054,0,0,b092baf4fbc36aacc19ee17878290470df7e4d78193d037ba3b0c1afdd4ad57a,2024-11-21T08:55:28.447000 -CVE-2024-22058,0,0,bb88969618926d9e845b61323f01822b5e9938fa8633a6af04425ce01e741be7,2024-11-21T08:55:28.643000 +CVE-2024-22058,0,1,c6e909191e931132825391684a21578f710eeae7c6f43cb60340156746910da0,2025-03-17T16:15:21.007000 CVE-2024-22059,0,0,5dd2797f8651084c7003283486cf668dfd7e91a1374f395778195e44226a6396,2024-11-21T08:55:28.760000 CVE-2024-2206,0,0,5cd23aee739a1ecf37ee5d3e204017ea16f7e42bf349d33e84a18d1c29954640,2024-11-21T09:09:15.203000 CVE-2024-22060,0,0,ed9ba15c4f298a42f28462f758b92465c987f6953d9ba6f5dbcd801f1adca5dc,2024-11-21T08:55:28.887000 @@ -252711,7 +252711,7 @@ CVE-2024-25366,0,0,bf9f988e5beaaf7037d5fc5d41f1eb493cdf15de69761504441d1ea806f12 CVE-2024-25369,0,0,1a5279686e5277f0474570d04c1907565b1c826db6e265d9d5232bbf5aaaad58,2024-11-21T09:00:41.330000 CVE-2024-2537,0,0,245581af9cb0004fabdffbfca72e0fda0e6cf99c56b5dfae5408c1dd2468d6fa,2024-11-21T09:09:58.103000 CVE-2024-25371,0,0,02370958f1fcb5a2b09fff3d567983d7c7d1e4ab210b6dca6193d9dd108edb58,2025-01-14T15:15:14.490000 -CVE-2024-25373,0,1,8b6de429690dfd85300a5df277e78624ba0cf5877abfd077d7a95f091562282e,2025-03-17T14:21:00.250000 +CVE-2024-25373,0,0,8b6de429690dfd85300a5df277e78624ba0cf5877abfd077d7a95f091562282e,2025-03-17T14:21:00.250000 CVE-2024-25376,0,0,b66e11cfe673f41884597e344a827fbb7b61ee47c6a56b5a6c4b95f40fe2899b,2025-03-13T21:15:38.583000 CVE-2024-2538,0,0,b85aea9765c05329fd4e9b8025754899d55685165e7227e89329268047059847,2025-02-05T18:15:22.620000 CVE-2024-25381,0,0,41718fab1364a06f6dcb130d239d6764dc030d3199b449114ae1d63e5d3a6ef8,2024-11-21T09:00:42 @@ -253643,66 +253643,66 @@ CVE-2024-26640,0,0,92616912f090b40ff68ef6c67c1229e9dbb48d65cc55494bdcfa16aef14d1 CVE-2024-26641,0,0,10c28089baedfd2d8b601c97aba159dc1eba346b5a6100553e6f40db239cd422,2025-03-10T16:59:54.610000 CVE-2024-26642,0,0,eacd4ff479b39c2b25a02a522a2b3ec84673f2bba8fab6c27cbe88f0970e2322,2025-03-13T21:20:08.647000 CVE-2024-26643,0,0,381435a1915721f5e392cc3aea148501afeee0f5cc10c03df1f341443e25405c,2025-03-13T21:20:19.930000 -CVE-2024-26644,0,0,199b4b00e0442f536b5d4f1f1160ca3445061f78dbb5297dbad2d2c45fe60c94,2024-11-21T09:02:45.230000 -CVE-2024-26645,0,0,ecbd8c8956d9ce1e24ad76f9828bbb55542e40dc35cc84442e894e8fc3e2980c,2024-11-21T09:02:45.353000 -CVE-2024-26646,0,0,7dcf613d93a1c70448728da7ba1a89343e4494ab3833f66375d89e1f207d0c32,2024-11-21T09:02:45.490000 +CVE-2024-26644,0,1,cea9a7e4803c79d4d81c182e1c7e8b487ebc56704470714078d61743c1187477,2025-03-17T15:20:20.027000 +CVE-2024-26645,0,1,803ab785b6fcb895611f2c67dc2f31b17eddbb4b58024934e0d69dd94f439088,2025-03-17T15:20:10.733000 +CVE-2024-26646,0,1,1a956380b6c5675e3cee7dd96da2aa128d2b4153800c767c2a0571c86be1ed93,2025-03-17T15:19:07.240000 CVE-2024-26647,0,0,0087defa8b2daf5e29c0c380220574740551b7537aefbd17ea5876ff9a0ca272,2025-01-07T20:15:48.587000 CVE-2024-26648,0,0,57660c3f5372b373298dbe0cd29fd4332764e7181a5b50e285b698a5ae516b44,2024-11-21T09:02:45.723000 CVE-2024-26649,0,0,affc58726c4d9b6522d6bde29012b9a628801f04a98430ddf530cfc9d83cbf05,2025-01-27T14:50:35.380000 CVE-2024-2665,0,0,9599114bbdfa2a0582ef31246d1d066104e4d9c0a632852f0476807f6686fd48,2025-01-08T20:05:50.257000 CVE-2024-26650,0,0,c37b82afef74cba8f0a1b3081e8c53c80ac8f73689ed9f1c045183b9566d980d,2024-05-23T14:15:09.293000 -CVE-2024-26651,0,0,29172f80ed2772fdc08c1bc7e26b4cbdfd7eddb2b9ab0c2ee91db421a83fd85a,2024-11-21T09:02:46.027000 +CVE-2024-26651,0,1,e5df3858fbaac21e38e92f06ac2c8cc92ccb9983ccabac4a6bf828860ce52995,2025-03-17T15:18:55.783000 CVE-2024-26652,0,0,105744a3326cfd97769655231f5141eceba4e2c7ae5c2e6279ca9167a71c0f9b,2024-11-21T09:02:46.153000 CVE-2024-26653,0,0,8866d2d1752b4fe3a78b08cd6c19a2f178b3cbc04d520bc84ae31c43b66dc51f,2025-01-14T15:37:45.440000 CVE-2024-26654,0,0,3b9733514348f22bc9a84fa3928369488859dc6099e0c8c0edcee02b3a089651,2025-02-03T14:32:27.763000 CVE-2024-26655,0,0,44c6fc1f60aa28c9bb65a03278297b88c473f78c7cccc5d35bc94149a1733e48,2025-01-07T17:19:13.987000 -CVE-2024-26656,0,0,a9e0e310043e47dbe76ca596e6cd9c7095870c5dccf87a1a3b70b482ea900f9f,2024-11-21T09:02:46.717000 +CVE-2024-26656,0,1,4cb2b7ee7caf3b2c4107f0ce6b19d933a0f101d0850c1e0b2a6e7178c63fb58f,2025-03-17T15:13:27.847000 CVE-2024-26657,0,0,5b20f2d67a13488a4561cdf1804b4d16bd412c492c2f8931f4259c8fdab78f08,2025-01-07T17:20:00.840000 CVE-2024-26658,0,0,fdb2631e448bd210fea3052df1cd33afa28ec2d71cfc06366e87396444d81fff,2025-02-03T16:15:21.710000 -CVE-2024-26659,0,0,f206600cec8b08a670caf05203deb0f45111538704ccd6fb8199637df12b29eb,2024-11-21T09:02:47.073000 +CVE-2024-26659,0,1,507bfe545d3becf9a9037a4273a711fd116e7c2e069ab02299b078f3fa8dd37f,2025-03-17T15:13:19.260000 CVE-2024-2666,0,0,94c10c4038495e2feaf574a5456d0064fe9e83a56f9b4605d7001b425c92541e,2025-01-08T19:47:15.707000 CVE-2024-26660,0,0,d97ef48df8f75a6efd9cbd18500b3e55e890bd3c88a6fa592f9023cbf997be07,2025-03-03T17:43:32.960000 CVE-2024-26661,0,0,d45863d2e30232e358edb0d1a1e889067585e710a0e2ee684c544bcee0a67515,2024-11-21T09:02:47.317000 CVE-2024-26662,0,0,a88f4521b9b995afb0e21d9f507fb182180356687597cd7121dd3a6b42115b74,2024-11-21T09:02:47.500000 CVE-2024-26663,0,0,74a791432f5d59cb2bc083592aaf9ae5c64f10e827e4bfdc39da1da462ef98fd,2025-01-07T17:20:30.367000 -CVE-2024-26664,0,0,8f02a12d29cc2ebf3d8854e2fc90cac0b06e32405af8909f00a5943917c0e330,2024-11-21T09:02:47.807000 +CVE-2024-26664,0,1,9c5508e7dd3d001bfd5cb60b1e75db16edecdc362f4785202977db09d90d87e4,2025-03-17T15:13:10.637000 CVE-2024-26665,0,0,04e35018512b09eae41fe71b4b81c45f0e7114f3ffecabc85d6f1b7e0a6a51f8,2025-03-03T17:36:42.837000 CVE-2024-26666,0,0,f3d57571a156c221255e6ed43ce466550f0474a9e05c86712515e781d1d5dfe2,2024-11-21T09:02:48.060000 -CVE-2024-26667,0,0,0135844ffa17950b758267c20fa1905b5cd210f3b577f621c8b735b9f82c29cc,2024-11-21T09:02:48.243000 -CVE-2024-26668,0,0,0771536aa4a796679bed1e130d363d11d921b37299ea37beee14b59095fae650,2024-11-21T09:02:48.360000 -CVE-2024-26669,0,0,17cae1080dc11f550e7a0d9b2aedf74958e2bd85842b053a0d4cae24e5664391,2024-11-21T09:02:48.477000 +CVE-2024-26667,0,1,e4cb9dd443d3b01dd2ad5452212fef391108d930ced9b29e0157a4c2b2b8b9e9,2025-03-17T15:04:31.197000 +CVE-2024-26668,0,1,814e930dad36470a2abed92bec76dc2cabb31e6c74c96407271e4ed592944ddb,2025-03-17T15:04:22.180000 +CVE-2024-26669,0,1,f953883a34eae729598de811e3f0aacdae680426bf21638d207965ae006010c6,2025-03-17T15:04:10.660000 CVE-2024-2667,0,0,27b21a53eda6df055088fa7ca753cc0e39ec841212da03554fec70e1efe6b4e4,2025-02-06T18:05:25.020000 -CVE-2024-26670,0,0,9e575ff441f3617740a25749aa1829331e6c73aee3411be5841edec1461d2ff6,2024-11-21T09:02:48.597000 -CVE-2024-26671,0,0,11444341bba1556e63c1459d24060aa4b22660cce545464851a2240d347a8c36,2024-11-21T09:02:48.720000 +CVE-2024-26670,0,1,d32fb02be9a8934b8f11d93094d51b59f1d786e8af3d0d09d8baf3ede1364523,2025-03-17T15:03:58.880000 +CVE-2024-26671,0,1,f3787107a3aeafc204b8f8c110a7f153493d0c8a550d8ae2540a199fd858d6aa,2025-03-17T15:03:48.280000 CVE-2024-26672,0,0,c70a64110bcd68bbde0a906463b82213fcccd910d662981df3a389ebb7bea170,2024-11-21T09:02:48.840000 -CVE-2024-26673,0,0,1ba7fa6be75236585ee1fe29a5119de2a7913c8823210b88c19755c8b293aa64,2024-11-21T09:02:49.017000 -CVE-2024-26674,0,0,9a1a6d7b39163c7974b9b9b4b02d98c306b6d9c63706b80bdb7e16e3f685f923,2024-11-21T09:02:49.137000 -CVE-2024-26675,0,0,70a39b8380f3df5014cf89c013c1c01c040e01c53d073d02f073f1e9f4f47554,2024-11-21T09:02:49.250000 +CVE-2024-26673,0,1,18126b23ebbb3349e334a596cbd43b765f7378480ff57061c9de666c560fd5b7,2025-03-17T15:43:02.517000 +CVE-2024-26674,0,1,a7def8d3d8370efab1d03b5e1019dcbbc48dcc907eeb19f517fd753f34cf6bf5,2025-03-17T15:42:54.880000 +CVE-2024-26675,0,1,7cd4d73c762323b0ebcbb68814d648e41354c78f3b87b8e90a5e81ea318a1a58,2025-03-17T15:42:44.150000 CVE-2024-26676,0,0,3a1d4f2358bed3ab4258b43ab823969ce460c8f7e1348adce7af38a7570d3019,2024-11-21T09:02:49.387000 -CVE-2024-26677,0,0,b5166d281955d1c16add36be5e6420db59a9bfaab1f5cf10835f4a13ea8ebfdc,2024-11-21T09:02:49.587000 -CVE-2024-26678,0,0,5f1ceb14cff5b2a6a5252f36b7091337391f7db265dad9149b65f42a5be44699,2024-11-21T09:02:49.700000 -CVE-2024-26679,0,0,9a48f5f6acf4d5b5bb16465be54cdbf5838dcc9fdf4f06371d8f4d37b26c91b9,2024-11-21T09:02:49.820000 +CVE-2024-26677,0,1,d9b97e6c70d29175f52a47368af2c29686bf8e72808fd873a2343b0a878f1402,2025-03-17T15:42:33.780000 +CVE-2024-26678,0,1,6d1cee4cccca21ec965062b991fd7e5ceb91aafdf43ab793aea2f86e126a12a5,2025-03-17T15:42:26.237000 +CVE-2024-26679,0,1,7744bfc7d84e85662dad16624343ebbf059e793cfc235c64f91c2fe48f3c909a,2025-03-17T15:42:17.600000 CVE-2024-2668,0,0,dbf55e1e8a64a96e127dce11d1af1c33b05a3735ca0c32918945d2c51b342a92,2025-02-21T14:58:19.927000 -CVE-2024-26680,0,0,bc2b247d137628cc15bb2c8c33d73f396a08da9f8f5b3beb1954f286ad4bd565,2024-11-21T09:02:49.943000 -CVE-2024-26681,0,0,5ab411a56a0f353e20d90d82b094030442022088771556807128b28aa9791690,2024-11-21T09:02:50.057000 -CVE-2024-26682,0,0,eeac5bf6ef8d05af5bb276b9811ed5fb52a8e1900243750951969067a589d732,2024-11-21T09:02:50.173000 -CVE-2024-26683,0,0,ccd8833b312169b706b2791abeabdcc0f3c3a07ef753ad3fcea5670068785899,2024-11-21T09:02:50.280000 -CVE-2024-26684,0,0,4a6524963e8a53aaf34cfd9d792181f0146042155250951bcf88a5c3f6f3fecc,2024-11-21T09:02:50.390000 +CVE-2024-26680,0,1,2801ce22ec3cae57ba578526ba63fc260dbca275b840c5cb4896ea3786be19c2,2025-03-17T15:42:06.147000 +CVE-2024-26681,0,1,f6fd43d9d810bcbedd5d5f114855f701843937beab93c0ac68767c8859d7aeda,2025-03-17T15:41:54.090000 +CVE-2024-26682,0,1,030fff2679b76fce46cbe5c544615ba73fcff070fef0a62ab47ea7306579e50e,2025-03-17T15:41:17.197000 +CVE-2024-26683,0,1,5b9da7f24476579a5375710ed030f96880538de52b6be055b18b5d1c035aff35,2025-03-17T15:41:11.497000 +CVE-2024-26684,0,1,60d09b08f02d8aaa55d386250b8b217a118ae0cf452e99a148f77af140b5bbac,2025-03-17T15:41:04.173000 CVE-2024-26685,0,0,d788863551b13aca79bd9e91f7defc379df7538a66da57b8c8f0d772600cb03c,2024-11-21T09:02:50.510000 -CVE-2024-26686,0,0,fe51f9bf73d90d5a214941acd0405eb00870b900c23cfba65663a560b7298263,2024-12-09T13:10:00.537000 -CVE-2024-26687,0,0,bc53f85197dffb674a90fc53eedce6830cd01f20356df2b55cdd5ced6d5cc381,2024-11-21T09:02:50.820000 +CVE-2024-26686,0,1,de428591b4945ad7918a04ab0959610e4b78905669739ee149a47f5daa83040c,2025-03-17T15:40:11.513000 +CVE-2024-26687,0,1,fbec56e1bf7296f58fa0e599377259dab52a691902ca82a6722bccf8578785c6,2025-03-17T15:39:03.150000 CVE-2024-26688,0,0,a0933753ecf706512391da968c1bf6e01179d03229619ccebb51447535c3b458,2025-01-07T21:12:29.727000 CVE-2024-26689,0,0,45aef623305996e79be3f7e9accf7726333231f3f2e12fd9e4b9fa27d10e7a24,2025-01-14T17:26:26.393000 CVE-2024-2669,0,0,f9471b163440c0cdda967029f9665700cf935edd6c2a1bb0a81b9e232cd43f09,2025-02-21T15:14:07.237000 CVE-2024-26690,0,0,2c7b24fb82937969d4004e2fcf893dbb69bba8a0a64d7e77bdd23c96decb3399,2024-11-21T09:02:51.193000 CVE-2024-26691,0,0,22d1e95d522495580a46cba49f03206b1fd1c00b94457c3ee5323f64f2257acc,2025-02-27T14:42:41.257000 -CVE-2024-26692,0,0,142ac90d3ae829b687c28ce96a2f14b4f11fc62dc0c619e9d57bb8c3af75bb82,2024-11-21T09:02:51.487000 -CVE-2024-26693,0,0,750c88b2b6707c06edcfd04928b66c4c7119df997396ebee2ae156c8d6965a74,2024-11-21T09:02:51.593000 +CVE-2024-26692,0,1,c86e4cbddbb5120ed88b11b3ce658826880933d9e82aa8cde8089462a4d704ee,2025-03-17T15:38:32.037000 +CVE-2024-26693,0,1,00f562b0f48f3bcb4c140bdf3380c0317e74478062b7f96c6d6374499eaeb210,2025-03-17T15:37:25.507000 CVE-2024-26694,0,0,31366aaef63a6678374a95d259ee5e17e7b5f964d9e410ff050a98b8f6c7cbb0,2025-01-07T20:53:53.143000 CVE-2024-26695,0,0,1ae7cd1e1e85f699df2959b2788d7af1c813dbc8bb82849f43b281e54bed1937,2025-01-07T17:27:31.323000 -CVE-2024-26696,0,0,a37eb618c9dd02f3e93b45df800b912cd99f8b596be40dbdd2a2ee9f7bfa3594,2024-11-21T09:02:51.970000 -CVE-2024-26697,0,0,77c269d39a973ed1bf2106bfa4f65263b1358e6c36a4ff63c23f64c6cc1c73f9,2024-11-21T09:02:52.090000 -CVE-2024-26698,0,0,9d3b9173004886d7e1336c05b14640ecb6283ff2c1783396ce44ef138ee22caa,2024-11-21T09:02:52.217000 +CVE-2024-26696,0,1,cb77d08eaff32ff765f3a91b5b19e3d49d8b1206347d0e62348792a445838ed6,2025-03-17T15:37:03.493000 +CVE-2024-26697,0,1,01098b7073748986736a27de7b9c6d7c5f4de605b2cd7ca1b304dc85376a47ab,2025-03-17T15:37:12.513000 +CVE-2024-26698,0,1,1a8195c76ed12e2006acd4b95cf123a6f5390d6e218cd1354acffdfc19815656,2025-03-17T15:36:53.817000 CVE-2024-26699,0,0,c3786cb3ee2f974c5262c14cc1cea6d35ad33ef5ed2ef9bac47a2b686a5c8dfa,2025-02-27T14:42:04.470000 CVE-2024-2670,0,0,8bf571b45e5a0f9f2f2f7f29218c47b9f435fc3d26bbb11853c68d013882dc52,2025-02-21T15:15:55.763000 CVE-2024-26700,0,0,d340b64f76c76c9e47b3fd93523ba35bc98d09d990c5461e898e1d4216e0399a,2025-01-07T20:26:40.460000 @@ -253710,49 +253710,49 @@ CVE-2024-26701,0,0,b03e1ce32248050afb32bc7948ab24791df0affca83332817771b6e5cd826 CVE-2024-26702,0,0,b5af06f31671bccc450c0989ef4ab99a946595a7c4a168f34f6c9ec495d6a954,2024-11-21T09:02:52.640000 CVE-2024-26703,0,0,48d9fe7105c1e15a2876442bef8d713d66393b820ebbecfd55a730936d80e728,2025-02-27T22:02:32.530000 CVE-2024-26704,0,0,3a0b52ff86450ce1fb82ebf5e7a18392c0d6deb9daec30492482410a94698921,2025-01-14T15:37:59.677000 -CVE-2024-26705,0,0,7d1815851fad30bc0a94ba5124abf4ba58055dfffb113e12d58c7ef1b5014138,2024-11-21T09:02:53.087000 -CVE-2024-26706,0,0,3980b759d14c55b81cd137c5d4154fc8472c2ab774416defb04e7cb6e8008c22,2024-11-21T09:02:53.200000 -CVE-2024-26707,0,0,13880289aa3260d317ff753ee378b58a2a30c0730742147ce84b5a774d8ca044,2024-11-21T09:02:53.313000 +CVE-2024-26705,0,1,110f9b3bcafc6ad0bc16a9054a0aef3c212a8eca0bc96a2248708081e1ca2a92,2025-03-17T15:36:41.633000 +CVE-2024-26706,0,1,6608689aa1cb1a883a201595f93b0d08ddb0bb15770ebae732176e4663c83eca,2025-03-17T15:36:31.360000 +CVE-2024-26707,0,1,1c758f00ff80d3ca5b813ab085c0f9ff555bb1b0aa5a49dbcb6e9068a2759dbc,2025-03-17T15:36:22.873000 CVE-2024-26708,0,0,47ec8499304cab94bfbfa9b8a22b56db0f85ef56b77fce5b97de36f3113336c9,2024-11-21T09:02:53.433000 CVE-2024-26709,0,0,84265dc256d943df4540d48ae1b11a8d0310b66ecceaef365d267322aba660bc,2025-01-13T20:03:28.797000 CVE-2024-2671,0,0,feb61bcc32f9be1106f3722b1adf31c8f856b81af916505898aab968cf19b588,2025-02-21T15:22:57.597000 -CVE-2024-26710,0,0,802a3597c6a0416f0cb4decb92f078076a33435886ac144f26ad3853de8590c5,2024-11-21T09:02:53.723000 +CVE-2024-26710,0,1,b738c95ced70807b461356e09fa92db1949c85f5c05571b831087b4afd6fe717,2025-03-17T15:36:11.620000 CVE-2024-26711,0,0,0eae4e2158a4f5f40ae27d5bba561e392d6ae7c39cea29b54b5701a7557592f2,2025-02-27T22:02:24.350000 CVE-2024-26712,0,0,fb8685ddd0683cdabb2327df61ff8cea2e7e86fcfa201af9434b63269c960077,2024-11-21T09:02:53.947000 CVE-2024-26713,0,0,e7e300ec5bbfa68ba83e0a47cb90f58abff0db2ab2dd369821dd312aa798bced,2024-12-19T12:15:06.330000 -CVE-2024-26714,0,0,87db1e3510e7967d782bddedfcd8da69fbf9dd7de01e3acc10c009bc5f1ae976,2024-11-21T09:02:54.257000 +CVE-2024-26714,0,1,ff28b0d279d42011501ac5d5a07332218c152d41bc35cc88815a5ff7f7909f7a,2025-03-17T15:36:01.447000 CVE-2024-26715,0,0,5ae11c6f26422b5fce76497cbf0825dce861f7ce3314d6efe4d1a3f4e53e909c,2025-01-07T20:25:50.327000 CVE-2024-26716,0,0,fd0bb09e387c4c792e9af49d76ec08db20adb4a2f2405ca74a5c652c09a1a316,2025-01-07T20:24:08.810000 CVE-2024-26717,0,0,46c391c98b1b32eddf64a008a07bf662b627805646f0b2a7812f9b60cc4c81f0,2025-01-07T21:16:14.697000 -CVE-2024-26718,0,0,b71c0a254c7aad42c306d673849eee87146b27e1c3e5db37335467c2a89b2d97,2024-11-21T09:02:54.723000 +CVE-2024-26718,0,1,75d55ac16dcb3b359d3fd2a3030f3075e34428053aea0588ceaa20980491b8bc,2025-03-17T16:01:17.667000 CVE-2024-26719,0,0,127c79e4e3640043dfa27a58f7d546dc2b243e766cd4031de3f639ee197dca89,2025-02-03T16:17:03.783000 CVE-2024-2672,0,0,a76eae905fe5c5af825e8e36531b8c12dabfcf0af54a0fb3b1e790b12eafac1c,2025-02-21T15:25:55.243000 CVE-2024-26720,0,0,1ca9f5c1cf45272d711bbb341b9a3a3e8a66cb323b330efba47b2d4d73910e9a,2024-12-19T12:15:06.417000 -CVE-2024-26721,0,0,ca9a0496ef9381a3510ada8cf6ba88673a4cc89acefb09f26c80679837546878,2024-11-21T09:02:55.100000 +CVE-2024-26721,0,1,91eca3282c2c5fae3d2e53fc117c1d7d8985fcde88aa457f17183c5f93a89c78,2025-03-17T16:01:40.143000 CVE-2024-26722,0,0,12d674d56dcf1067f7c24e779fb92b06855d0b7019ccfecfbfdcc292981abf0d,2025-01-07T17:35:32.710000 CVE-2024-26723,0,0,f35d3a0170fc204ff63f3cb0d2c569463d0cc7f7c48d6a9fa170a41519069565,2024-11-21T09:02:55.350000 CVE-2024-26724,0,0,19f7151406ef2f5c5b1cd459b98c958e0a845b85e8a1773b285bc393595645c2,2025-02-27T14:41:48.253000 CVE-2024-26725,0,0,e9fe20a5c5e5470547a40a8d97f1401a07214b8c6c4b76fbce65efa947d2335c,2025-01-07T17:28:15.293000 -CVE-2024-26726,0,0,a2e6006099000b7188e7331f1757708510f6f822879749731a4c6d16b7b3a5dc,2024-11-21T09:02:55.767000 -CVE-2024-26727,0,0,f9e493a2bebe6568fa8635c090fa7c3e7b404bd3fd35053c77015e7873b7cdd0,2024-11-21T09:02:55.880000 +CVE-2024-26726,0,1,ebcbd1f97ac925ffacccd1ba4596d61a2a069cfd3a44d0d8f42d599084efe791,2025-03-17T16:01:56.210000 +CVE-2024-26727,0,1,71f7b03339f4223b777cb9d9dfb62a277038b548f33e01a86471a0412cf7adb8,2025-03-17T16:02:14.380000 CVE-2024-26728,0,0,7a1b5252bba1cef22267913e083366e2f39c736eb8eef161449f7ded9aaebcba,2025-01-07T21:15:57.473000 CVE-2024-26729,0,0,24cf9adc4db4b9564630e9709ebc75b534e05f18a43df73e371a82f4fe1149a6,2025-01-07T21:14:13.190000 CVE-2024-2673,0,0,3b348684b11f482dbfdc6a99c2eb24f4a48803ca091c7188ef07e5a51620c9f8,2025-02-21T15:31:50.453000 -CVE-2024-26730,0,0,4282f275af7b9ab810034661a7d2fe758e353eb17c2f903213e76a01d8248927,2024-11-21T09:02:56.220000 +CVE-2024-26730,0,1,e9a9e82512458ef3354bbf989f938d833c81ad7855f5c092b9dec4004b884528,2025-03-17T16:02:28.967000 CVE-2024-26731,0,0,93df8098dbc8b35339297c34d2cc186ab96abe59edc56773a7bed56c8ef330b4,2024-11-21T09:02:56.323000 CVE-2024-26732,0,0,93d68c2245823b23f9cd1f7e63a32b54ddda53966feab1e3f497dd7c79e0833d,2025-02-03T16:17:25.537000 -CVE-2024-26733,0,0,da33e07722e15d2f0a18149ad788ee6ccfc0a2e4bd4d72b5d551c09bc1b88e06,2024-11-21T09:02:56.620000 +CVE-2024-26733,0,1,9347556dca79da5f4e5f4696d6999fc0ff34eae58e1f046990cd6cafc20b7aba,2025-03-17T16:02:47.887000 CVE-2024-26734,0,0,03f25116197f27b888005564a660d6eab1968d4dee38a6141c97d50d1126d43c,2025-01-14T17:26:43.583000 -CVE-2024-26735,0,0,30e8628d9f42aab284fe6448f31e57be199d83e5b82fc9070fc6b1a0ed99caec,2025-02-27T20:15:38 -CVE-2024-26736,0,0,b29129ddb5d3afb3852cff1b0fe131c66351f86286513d203d1c2dae3f9ca5da,2024-11-21T09:02:57.090000 +CVE-2024-26735,0,1,8376bf8aaf5bbfc4470da7adce5f6b9f58511b72d51065a9b6f0cc0b6f24b224,2025-03-17T16:05:01.547000 +CVE-2024-26736,0,1,db0f3e358d9b2b4371e86aaebd5993fe0654a1caf1496c0ee4b3fb7c3fb7202e,2025-03-17T16:03:20.093000 CVE-2024-26737,0,0,03a6f3a24bd6f11bc15a839c4e708d9160bb2b3e53fb885adad418a2aca958d6,2024-11-21T09:02:57.210000 CVE-2024-26738,0,0,7401dc8ccba47014fc09b50b349b2fbe5d1a660cb458a9c717c4b0bf3e62c9a2,2025-01-07T21:13:43.273000 CVE-2024-26739,0,0,3e91524254897924d33159faf525041742412059c301b8791dc3047a5453f1e7,2025-01-07T17:28:37.057000 CVE-2024-2674,0,0,80a66d2afa37b26f97e60d6fdea15af0c59deefece42bba01a8930d39e5e7d3e,2025-02-21T15:49:25.710000 -CVE-2024-26740,0,0,5c985b6d9944a225321eb8d8626fe328a08a180b8b9ad6ec1127b25a27e4e7b4,2024-11-21T09:02:57.653000 -CVE-2024-26741,0,0,07c5a92acb340b29068c32dceb2487e34761abe12c58d1829d69712440cc0bbc,2024-11-21T09:02:57.780000 -CVE-2024-26742,0,0,e0e60fb6f1d49178708e8d427e4aba631ca93532220f47d194a5e78164a7a57e,2024-11-21T09:02:57.910000 -CVE-2024-26743,0,0,833a814bb557cdfb52c4be16009f8f2fc349c6e4324137378e70ed26838b142b,2024-11-21T09:02:58.037000 +CVE-2024-26740,0,1,bae4c9fac49600181f08052e69cc7a5f5528d382c6bacb471dff4c717a962a28,2025-03-17T16:03:33.700000 +CVE-2024-26741,0,1,2c4de59648952a2362ede4380ae9b072da084628051e21ba83d372b54102be86,2025-03-17T16:03:52.647000 +CVE-2024-26742,0,1,97fe5254fde21c5c42c0b34b715d464fd3f3a8c67ae978db2d115a5ad87be309,2025-03-17T16:04:16.513000 +CVE-2024-26743,0,1,3ab52901b4f3295b59ffce3d32c81c40e12919de468adcccba2335902ceca63d,2025-03-17T15:44:46.180000 CVE-2024-26744,0,0,726af10ee1f156ef71f781f51f99bc1a73a1bd929743db54f0e9c55c799e21a8,2024-11-21T09:02:58.190000 CVE-2024-26745,0,0,b947ea109848474d6dfda2fbe16d216499111dccdd8dcd26899f1b894b9ea211,2024-11-21T09:02:58.403000 CVE-2024-26746,0,0,86aa0528dca44c4fb5b6b5072954273d7d042341aa7f2115eafd32b46402ba28,2024-11-21T09:02:58.613000 @@ -253761,18 +253761,18 @@ CVE-2024-26748,0,0,de80e1b40a25ded51f067fff844d8e2ac1ed0e390911ce7796a7ad960020e CVE-2024-26749,0,0,aa7e7096104dbac75ed8cd854b66b0ce094be82817161ad941c47ae83e7cde08,2025-01-14T17:28:07.793000 CVE-2024-2675,0,0,a432f663f36093d2797dff29d97cb824a0923a29fe5d01cf99dea2b13534d1ca,2025-02-21T15:52:43.843000 CVE-2024-26750,0,0,94dd61c3c28ff5b4b8be06dbb38fde205c5b9d50e1d14542fa5032faf9ddf704,2024-11-21T09:02:59.203000 -CVE-2024-26751,0,0,1e619e8fe0318e1c48482a9e82bff0725291c1d0b69bffec38f5e08d3f2af80b,2024-11-21T09:02:59.333000 -CVE-2024-26752,0,0,8b44b0cbe238350cd3aba9d2cef251b57898811e1fd6d1e9877c06b446f7e0df,2024-11-21T09:02:59.473000 +CVE-2024-26751,0,1,2b857b3fa9b45ad36c14e1b8198bd7fed9f385dbc0df9988b27d23100a873fff,2025-03-17T16:57:25.003000 +CVE-2024-26752,0,1,608ccfb4d7a8b8693d3731112e07e20428505e38a79f4c705a81d2d2794e1ed5,2025-03-17T16:57:11.283000 CVE-2024-26753,0,0,54bc9dc40e514e7212847ab36dae49d8dc3504887ffcc5dcbb1e839b6fcecf7b,2025-02-27T22:00:28.967000 CVE-2024-26754,0,0,175be97ba4873a77188833236c6ae06bc719c11b1be4fb508248fd70bc0f47e4,2025-01-07T21:13:04.700000 CVE-2024-26755,0,0,afbbb8c803ab19908e74568d9ad9d4969c2fce1da26912e6aec42da718604890,2024-11-21T09:02:59.840000 -CVE-2024-26756,0,0,277504566c3f61e232c5a3428990fe53a476b409dd55cca3fc33763192194c3e,2024-11-21T09:03:00.037000 +CVE-2024-26756,0,1,33c353e086c76d3ddced4ee6e4835d00b5fca5c121d28048cad6d1902ce970d5,2025-03-17T16:56:57.017000 CVE-2024-26757,0,0,ea19223d6591c0bb304a57b49e3343899072ac606ffd2b71bfbed5f59d9bfd66,2024-11-21T09:03:00.147000 CVE-2024-26758,0,0,c89d8554b475b329ed0ac9ff1b69624897deb142b13dfbc35a85f8d82feeb354,2024-11-21T09:03:00.333000 -CVE-2024-26759,0,0,c16a8feb5c03575808a38e891cf9c009a3d4bd2625d12119e088f14de118118c,2024-11-21T09:03:00.527000 +CVE-2024-26759,0,1,4149d7c7033643511b1f9d0e90b6322498fff207ba3a277aedae496842f0c8ef,2025-03-17T16:56:49.890000 CVE-2024-2676,0,0,909464e30d2c10e8a9af079a102bd07a257c9534a32f512f1c3ed8618aa3e4c5,2025-02-21T16:06:24.990000 CVE-2024-26760,0,0,d446397ffceb7399af2d0770a591678d71834fbac6c4a5c29ba8551476b58a48,2025-03-03T17:34:59.137000 -CVE-2024-26761,0,0,aa1a20a0803d63a54b19e75f2a8a8f8bec9c12a955e5a2a8d3004b5d801f81f9,2024-11-21T09:03:00.763000 +CVE-2024-26761,0,1,4a545fec9e70200014ce002ad7185549210023d8d2a1c4be74546ce8aaebf60d,2025-03-17T16:56:39.690000 CVE-2024-26762,0,0,a287f1e9fd29a626fe10dbe6954ee97461b04e8a4deb899f82974d34c52e8f61,2024-11-21T09:03:00.880000 CVE-2024-26763,0,0,ea60cb10ec181dc23fe842240e1437c7c10aef932cbc953d9703f81ca6ffe278,2024-11-21T09:03:00.980000 CVE-2024-26764,0,0,182584c1b22dec918cc3c58a7bf9ff6e42e4473d6f7b976355d13ff4ba65cc27,2024-11-21T09:03:01.100000 @@ -254430,7 +254430,7 @@ CVE-2024-27382,0,0,707f41c0c38fdff19534efd7998b66186ca0c9cb742581a2c484f59be8fbb CVE-2024-27383,0,0,72e70359f0f73aeb1e6b8c0368d83827211bcfc295c5402bfd5cfdee6cfd7908,2024-09-11T15:25:24.303000 CVE-2024-27385,0,0,e1a41ce9dd72dcc7e74fb02b5b7a34d75ee1fd10edb45ea10c35a3afe68bad13,2024-11-21T09:04:30.110000 CVE-2024-27386,0,0,1b64d665730a7687a332bebc6b1e44f0548d458eb827204a2ee1cc939a731c55,2024-11-21T09:04:30.280000 -CVE-2024-27387,0,0,74d76ecfd4c7d0eda3830292dd6b42737cfbe9975269ec377e98fccc5293c5ca,2024-09-11T15:23:58.743000 +CVE-2024-27387,0,1,f80b391b77c2a4e04325f2fd0a86e21edb07988c6c2cd77439241176d0ef14dd,2025-03-17T16:15:21.177000 CVE-2024-27388,0,0,98453ba7ddab0d75275ebcbe2cf9adcd01c61d4c18396a578a59da147f49ad6d,2025-01-14T14:56:08.617000 CVE-2024-27389,0,0,c217d6184563415f226e9a80f037b8d7514915a86c3207640b24918bb7cb55bd,2024-11-21T09:04:30.670000 CVE-2024-2739,0,0,f4d65d5336ee215a214a5da90ed0322790b7be3ef272f9615bf61860991305e8,2024-11-21T09:10:24.570000 @@ -254587,11 +254587,11 @@ CVE-2024-27655,0,0,64fa652cff6d4913a7eacc3477b493ff8020b9ebde555ca388d39ea40f9c0 CVE-2024-27656,0,0,68f3453eec67e27bd69569bc008dd807d641f5cc4dd19bbc4b6e65dd6883ecd0,2024-11-21T09:04:51.073000 CVE-2024-27657,0,0,aa83ece6f7ede02f84fcbdbfb40aa14e1e784ec9454470534310c727804b3979,2024-11-21T09:04:51.290000 CVE-2024-27658,0,0,ec2bdec5247f3c97bd8546879baee27bca19da5c364ab8a35116d58a9e5e25d3,2024-11-21T09:04:51.503000 -CVE-2024-27659,0,0,2f78ac40c65414d5d1c59c189d21ae35d2a9ecbb557df1e8dd5ee3e398e64600,2024-11-21T09:04:51.713000 +CVE-2024-27659,0,1,5f53eec633e877602fffd476c778d6969329b61d5c71bac54c56dd979c542529,2025-03-17T16:06:46.313000 CVE-2024-2766,0,0,de51f5ecc0e7ecad5af7ae30bc6aebed0c074fc036092bd677e69185173b5884,2025-02-21T16:56:50.517000 -CVE-2024-27660,0,0,835ac63ab012d73e58b5daf1fc09a9c03cb7c25a8cb7d04cf00ed24bee7d8f19,2024-11-21T09:04:51.933000 -CVE-2024-27661,0,0,cd47d5ad50a1483352849e84cca220184c60f0c47ac978c4451290afc18a5f3f,2024-11-21T09:04:52.157000 -CVE-2024-27662,0,0,91e7bd9706f6bfa8a26a1422fc84aa4cc748e01c07009e6625a25cad5d5fb1b3,2024-11-21T09:04:52.400000 +CVE-2024-27660,0,1,c95ff3bcf97b2e5d2a5f64d98274ed6bcdb0f4b5e6fbb214ccc7a3476352018b,2025-03-17T16:06:32.180000 +CVE-2024-27661,0,1,93b56be9a6f84949ecbc65322aa05c734ee8c1e71f57b782fef5797de0146f36,2025-03-17T16:06:18.090000 +CVE-2024-27662,0,1,72abf22b0b4cca866e45f1b6de9f159179c7e5da2f8910279ed31f87f6b98933,2025-03-17T16:56:03.977000 CVE-2024-27665,0,0,d3058ef20841fa8a41f5abbcdc1600eb1abacf632b9f9e89e0646ba4b85eddd5,2024-11-21T16:15:23.677000 CVE-2024-27668,0,0,4ca941aaf1b15170f8e7bf822cfc74a23da1744e93b4f383c770be205286d968,2025-02-26T16:44:26.053000 CVE-2024-2767,0,0,9d4b13e3def7f38db3b6a06853d5184f33e7cbd07b686b0ba35c53dba43e694c,2025-02-21T16:59:39.160000 @@ -254717,7 +254717,7 @@ CVE-2024-27834,0,0,6c6d54d22633be541c48da8706377c23c9ad13fa603579cca3775efd6a72c CVE-2024-27835,0,0,f881b6857db9fc81b1871120d8438516334e3c0ba89dfda682c1ff2f016b760d,2024-12-12T14:33:00.640000 CVE-2024-27836,0,0,cbc2d84b81c4d8680b3e2ce71e679c4626236304b018eec892d9a66d50b30816,2024-11-21T09:05:13.850000 CVE-2024-27837,0,0,dbe00fc9ad9cfd5169a026b6dd14e56e505a786293836f85ce62ef635b022b41,2024-12-09T19:50:49.497000 -CVE-2024-27838,0,0,f48a4ff4fde890aeedd51ce8d5c4a8dd37d520a0fe71173be2957a5d08c5e442,2024-11-21T09:05:14.337000 +CVE-2024-27838,0,1,57e6216c5d076e7a26d928f4b4cd15b03868f4834d205ea9903bb9a91056529f,2025-03-17T15:15:40.557000 CVE-2024-27839,0,0,25de2ffde9540eeb3dfd6497c179aacaa009bc4d2b387bc139e8b6349aa09d8e,2024-12-09T19:49:50.323000 CVE-2024-2784,0,0,d93696e021650672f378a38aa248f523c029fbe3ea2736657b8e0dfa01153bd8,2025-01-29T16:49:47.620000 CVE-2024-27840,0,0,453af47d9309a88c2e180a33c2d097b7c43c49ce2350ecde6e4b6a774767854d,2024-11-21T09:05:14.717000 @@ -255826,7 +255826,7 @@ CVE-2024-29301,0,0,0b8fa97e724a0f2d24e37ca1a4df5c4ca78204e3fd2679571d5516d23f066 CVE-2024-29302,0,0,a396970a1bfb9e586dae33dbbabcbcf0c71d859b9e4ecbbb9f7753a6e28b7a9f,2024-11-21T09:07:55.880000 CVE-2024-29303,0,0,d06549f14e9cda2e75b85b1c6ae9ba33f16a0dcc3d18f7cf7ea9a575fe2c0e15,2024-11-21T09:07:56.093000 CVE-2024-29309,0,0,0082805f5fd607b4a8b696afc756ce0148248a6498a1ac3f5f6f79133d44ca30,2024-11-21T09:07:56.297000 -CVE-2024-2931,0,0,30e7925780b8355e627aa4c0588bbd42564546417e267c31f5b8bba1d224f44d,2025-03-04T22:15:36.563000 +CVE-2024-2931,0,1,a4b1a8d39c3705dac3f64a18b924666c377fb6113a9b43fe7a8fb29e842f6627,2025-03-17T15:40:51.540000 CVE-2024-29316,0,0,fcf08fc934238242be85211e527308a25a1845e213d3df0567dedd77f3e73990,2024-11-21T09:07:56.540000 CVE-2024-29318,0,0,5979223274c4257063a5f43d788a95d0cf9d1ec53d4b8ec4ca8fde4767552fe5,2025-03-13T18:15:39.140000 CVE-2024-29319,0,0,69fb3b2cb652eb32dd1d717d0873133a6783ff4c6e6a16c234669dea86327af7,2024-11-21T09:07:56.937000 @@ -255888,7 +255888,7 @@ CVE-2024-29454,0,0,1c893aa9fc261c831d35b219df714ee3ff6151f3ab4ae74ce0e7125ab4508 CVE-2024-29455,0,0,c5766b7ace224fe7d010005c23caa8535593f35607a7498893863c39faace774,2024-05-27T01:15:15.573000 CVE-2024-2946,0,0,997d6b53bb745a8fe904139e2791e2c813b08bddcde7c3f57e212bb43a8941f1,2024-11-21T09:10:54.347000 CVE-2024-29460,0,0,8d92453cad8a8393fa15cddde56132ecc5c7ca6e2ee3a6965bdc21d4886ca532,2024-11-21T09:08:02.840000 -CVE-2024-29461,0,0,19b6d7c33a79db7e051a85f7a454bf3abf537814857bc322df2b6ca84388e42c,2024-11-21T09:08:03.070000 +CVE-2024-29461,0,1,6784514e8f6ad0fcfc7af2e2ecc7f7e5ac701f479b42634f80923d877f6e76a5,2025-03-17T16:15:21.387000 CVE-2024-29466,0,0,dfd330dba5d7fba0202d1e5874291f2f8ef3b988243824c2ad389998fb4c34d7,2024-11-21T09:08:03.290000 CVE-2024-29469,0,0,b4ff7e7dd0886c37f289432ddc27d014390f9ccece3870733ae3b10ba447da3a,2024-11-21T09:08:03.500000 CVE-2024-2947,0,0,a2260296cea0a8b0297fccf6e19d9b38e7eac981b1298727580d42f3bdd9e8c4,2024-11-21T09:10:54.473000 @@ -255908,7 +255908,7 @@ CVE-2024-29502,0,0,8b281ceab8400deda3cbd9fc2a92390088e4502010861b3ce65f71a4a35dd CVE-2024-29504,0,0,53fc663b9e6d96ca964c735e36e903d675794b657641161dbc25730d9236f310,2024-11-21T09:08:05.703000 CVE-2024-29506,0,0,33bf7b54456a7e4cb2ab4766502f70f6f853d9cd67666f22c7f233033f9462b7,2024-11-21T09:08:05.937000 CVE-2024-29507,0,0,93542c862056d4c35a631847c41896c490e01aa3d0b341ed0eed1882aed2d1c0,2024-12-03T16:15:21.343000 -CVE-2024-29508,0,1,536c14ce04e18fa15e83ca5caa40460bc2de5ae8a8a60dacf4644cfd33c2babf,2025-03-17T14:15:17.610000 +CVE-2024-29508,0,0,536c14ce04e18fa15e83ca5caa40460bc2de5ae8a8a60dacf4644cfd33c2babf,2025-03-17T14:15:17.610000 CVE-2024-29509,0,0,cba223f5b31c075d11c5e083750eaa458611f671573da4d965e953347f673d0f,2024-11-21T09:08:06.510000 CVE-2024-2951,0,0,0af750d8fa5d6660d81b92e4090fc96c2f893ae32a136d6454a0eb8dec22afe3,2025-02-04T20:04:27.787000 CVE-2024-29510,0,0,71fa9c4217e55bccbf9dba63ba481f89e84e04df22cc0bee2642be0dadc7e1f0,2024-11-21T09:08:06.683000 @@ -256842,7 +256842,7 @@ CVE-2024-30604,0,0,2985af9e64c12e4608f3459f838f87d0cb70a91012e2986a6dc96d72b49eb CVE-2024-30606,0,0,a47e064bd95f8b49c44a9cfc5a6ad80e9ac014d5cabbe66a38e32935e17d7d03,2025-03-13T21:08:42.520000 CVE-2024-30607,0,0,f5c94f509de05230d001a80501e8ec80e1dd0487e34ebb0bfa9edc68384f1139,2025-03-13T21:10:36.017000 CVE-2024-3061,0,0,1259480b9dea28facb7d5e76401d1a90ba7bc3e57be5bc78ff1a0731906b75ce,2025-03-13T02:08:38.823000 -CVE-2024-30612,0,1,1017fe53bd0dae7035a8a8d41309049633a92d26ead2c3022adf453cffe03da3,2025-03-17T14:21:36.410000 +CVE-2024-30612,0,0,1017fe53bd0dae7035a8a8d41309049633a92d26ead2c3022adf453cffe03da3,2025-03-17T14:21:36.410000 CVE-2024-30613,0,0,4af26d39f384fc744be92ee5486ca8569d34c559bc319211a0004dfe1d867038,2024-11-21T09:12:18.120000 CVE-2024-30614,0,0,28c91df1af346769b88f1309b052a041a0d56dceb4106ef242bd2019619d3e07,2024-11-21T09:12:18.340000 CVE-2024-30616,0,0,4b015292af8508f3d2e0fce4d18d9fb2a626b7d54f1e7875fa72aceb60528a18,2024-11-05T19:36:11.770000 @@ -257061,7 +257061,7 @@ CVE-2024-3101,0,0,b43a9a65b8dd96b574d88a97c97263dded7de7cc0c3f0a55bcbdc8a92c066a CVE-2024-31010,0,0,bff7902cb97f72f80deefafdf7684bc53fe71be184809cbc5ae6efbd05f4e8cf,2024-11-21T09:12:43.170000 CVE-2024-31011,0,0,24b6b4b4d911bb44d7c9f667d95c31c2327e63da8572762d344d3e3e7da6b6a9,2024-11-21T09:12:43.390000 CVE-2024-31012,0,0,2e463cc9cf6cefa8aac765e3f1b1c9d26717d587bbdb46f43bc382ad23360bb4,2024-11-21T09:12:43.630000 -CVE-2024-31013,0,0,196fa5a72590f2a42a92d6d9d34abcc1ad419fb7b90ebeb4d56a66388af169b9,2025-02-27T21:15:35.987000 +CVE-2024-31013,0,1,01d61c602b8e92c3361daf4356e39b3ab9f29a666d0e5bc89ee8873e6fa392ba,2025-03-17T16:15:21.610000 CVE-2024-3102,0,0,21789bb35ca485f7acde593041e201a50941c14df197110842a770f0c2af0902,2024-11-21T09:28:54.413000 CVE-2024-31022,0,0,aebbffc3e18bdbc5da138d73aac1a11ede1641612c93cb3f86d64007284660bd,2024-11-21T09:12:44.073000 CVE-2024-31025,0,0,65d7ab3959086e03b6d319a4283b4c427986c994cd6832b660245eeb10de9b88,2024-11-21T09:12:44.277000 @@ -257163,7 +257163,7 @@ CVE-2024-31156,0,0,3a0b783c9ac720f743a65169c3dbf3b752abca84fb06686f38385be2e0b53 CVE-2024-31157,0,0,f6cdcc8f436113d457dba94e9affaae623f9f0a5ca006ec1e9593b807a5a5a48,2025-02-12T22:15:33.197000 CVE-2024-31158,0,0,23231ffa5f94012fdd934d48ba8f000ea26a69d8fc6b9fa07237a8071fbc996f,2024-11-15T14:00:09.720000 CVE-2024-31159,0,0,03c6968dc84b6c9c621449721b8162808e91282b21ae57f781c1a323ad26b62c,2024-11-21T09:12:56.343000 -CVE-2024-3116,0,0,e5fb7e9053bcf0174755b5ae840485dc9465d09d160ee3c898ef398f09893ad1,2025-03-14T17:15:45.840000 +CVE-2024-3116,0,1,3422fb97b752640c32979169cc4c6c3c196357b1497ec0a16ba141b620d5a335,2025-03-17T16:43:52.873000 CVE-2024-31160,0,0,3ec0c3cd6c681b791544e5cdf3201ba0439873b0b98eac6b324ef1df178fbbcb,2024-11-21T09:12:56.480000 CVE-2024-31161,0,0,517e86c74aa46db6761ab57b06479b00e6efc5fa1ee7108eba5e35c7dfb16730,2024-11-21T09:12:56.600000 CVE-2024-31162,0,0,c2deede9ebd49d3db7c8caea9b51ca1a1fd14b17c8cab01d46f02a0c89bf77a8,2024-11-21T09:12:56.727000 @@ -257985,38 +257985,38 @@ CVE-2024-32268,0,0,4220b068189651923e7c03eaebbdaa1016b5566433d5df81372417a7a35be CVE-2024-32269,0,0,946bbdfbb629e9015a5d3fff72eb7016b39f3bb020c4b6fcea1e2b24974b3684,2024-11-21T09:14:38.380000 CVE-2024-3227,0,0,28a05cffb436fab86b4dee105af0c7bd6e6a85e8028ebc28c7f55daea5c039c9,2024-11-21T09:29:11.463000 CVE-2024-3228,0,0,08ccf2d9f01838c2ec15add697673a4972e6918a8d27a226bfa96edaba6deef9,2024-11-21T09:29:11.610000 -CVE-2024-32281,0,1,baa43b3f2e98b810313430f2c5fea015d8f7ff956602103350f12d2ddc4c5008,2025-03-17T14:35:04.940000 +CVE-2024-32281,0,0,baa43b3f2e98b810313430f2c5fea015d8f7ff956602103350f12d2ddc4c5008,2025-03-17T14:35:04.940000 CVE-2024-32282,0,0,14e0f3f51988a69d3afeaa6af3ca750209ffcc296109442e73f700eb1679c46a,2024-11-21T09:14:38.790000 -CVE-2024-32283,0,1,e4e529768024607aa9e154e8b7e396e0af9ea53d277955e779484cc781caffab,2025-03-17T14:55:37.623000 -CVE-2024-32285,0,0,bc7dcfcb85f52065359087cc2c6ee43afa84d2bcd5e78cac9cdef767142406f8,2024-11-21T09:14:39.233000 -CVE-2024-32286,0,0,13b8dca84cfe1aad84f6aeb4edd8bf086cb9604e8785090f3b88c7ef4f19e008,2024-11-21T09:14:39.453000 -CVE-2024-32287,0,0,93aca0339e0f326784bb6613a44cad7b9f1ce98a4a455ca85b170208437bf607,2024-11-21T09:14:39.680000 -CVE-2024-32288,0,0,69d4a27794b1a7fd20a36a4ef133115afeda04ca19742246f2dd4b587a2a4185,2024-11-21T09:14:39.897000 +CVE-2024-32283,0,0,e4e529768024607aa9e154e8b7e396e0af9ea53d277955e779484cc781caffab,2025-03-17T14:55:37.623000 +CVE-2024-32285,0,1,00c2b1e439cce5fd4b4bbd4e7f6da91b338690b42fa0464c89766f10e6e89ff4,2025-03-17T15:59:31.947000 +CVE-2024-32286,0,1,1bf1d5468d74dc1618a9ddaea0fcabed2473c2bef54d8dbaf8f226daf94ffd2d,2025-03-17T15:59:43.380000 +CVE-2024-32287,0,1,de2d2693d74b789edd28ba1894e6b384f80db80aaf842ed13d2db7612807bd80,2025-03-17T15:59:52.717000 +CVE-2024-32288,0,1,ef403eee23576535591886c219226978b671cbf513a1a2dd86de7a64466e3b4a,2025-03-17T16:00:01.127000 CVE-2024-3229,0,0,b1ac60cebd5b6e9920e17f379bad5385126228a670a520791db5439274af3047,2024-11-21T09:29:11.767000 -CVE-2024-32290,0,0,a2983830664d24b9eb2d53f3e79f8ba4e97bd71a7829841477ae4e7e56f7864b,2024-11-21T09:14:40.117000 -CVE-2024-32291,0,0,084748f21cf4b290ad9b8432262683f6a910d12b4abdd0a726ceaefd47f548c6,2024-11-21T09:14:40.337000 -CVE-2024-32292,0,0,b64d1d142789f28d2b4db44be538066a8ddcd2d62f7837419dee19ee571ca646,2024-11-21T09:14:40.560000 -CVE-2024-32293,0,0,96ea308a524a6a72677b71e382cf7e631e27c9dd91eeec87f332dfa1e415a91f,2024-11-21T09:14:40.783000 -CVE-2024-32299,0,1,5f0946a2cdbe2720bbd744f2dc714da7fd85d232596ed7e2fb9e14970e270c6a,2025-03-17T14:55:05.107000 +CVE-2024-32290,0,1,99ec7e7f1e30578842ace752803fc65ddc1a4dac29b5599c4f59f3af8705a1bb,2025-03-17T16:00:09.727000 +CVE-2024-32291,0,1,34bd038cf4efd64cb9737b0816dc28ec0006ab164823a9dfc30778f54735b23d,2025-03-17T16:00:18.163000 +CVE-2024-32292,0,1,876e239cd3199aae3d6d6ee932a03c64bc75b0376c1259c8894ec5a79c5b0b13,2025-03-17T16:00:28.613000 +CVE-2024-32293,0,1,a0f7764ba20f83509efd34e3fd5a66f4f7cd70278cbf437f428adc8eb9df6c38,2025-03-17T16:00:37.433000 +CVE-2024-32299,0,0,5f0946a2cdbe2720bbd744f2dc714da7fd85d232596ed7e2fb9e14970e270c6a,2025-03-17T14:55:05.107000 CVE-2024-3230,0,0,86bacb0366b81d64fce64b6ff8fa878844a28a8e990be7fb36424d220c9abbc3,2024-11-21T09:29:11.920000 -CVE-2024-32301,0,1,ee1404061ced83cb024b92122d342d49f7a4cb8ecf5a03206bec996c6b0c78ad,2025-03-17T14:37:20.667000 +CVE-2024-32301,0,0,ee1404061ced83cb024b92122d342d49f7a4cb8ecf5a03206bec996c6b0c78ad,2025-03-17T14:37:20.667000 CVE-2024-32302,0,0,1cb677296421350842d324a9f4094e7769943e60a3a8c41d8e7051c7897ada09,2024-11-21T09:14:41.460000 CVE-2024-32303,0,0,8a43bae6378d5f48d1263aa5fab9ae0aafbad84b39e4c714dec850d026e9f012,2024-11-21T09:14:41.677000 CVE-2024-32305,0,0,d64f52a9cba702d4e50e57a58f08e3917daf6432c45e37acb7a48aa6e00b6fea,2024-11-21T09:14:41.880000 -CVE-2024-32306,0,1,9be3c360283df9c0c384a9673bb3d10b30fa679cbaaf115abc41ae20b47e90f3,2025-03-17T14:22:18.777000 -CVE-2024-32307,0,0,487d16ae8d7367607c14a294eba6e4d6be70db122ca32413faa6dcf24d5493a8,2024-11-21T09:14:42.307000 +CVE-2024-32306,0,0,9be3c360283df9c0c384a9673bb3d10b30fa679cbaaf115abc41ae20b47e90f3,2025-03-17T14:22:18.777000 +CVE-2024-32307,0,1,43d7c3e48275460b24c82bf9651c919602afb6c998f82a0964f8e49ad1e74194,2025-03-17T15:06:45.053000 CVE-2024-3231,0,0,7c6b21a7dba969869ba73baa3d521abb0cdcc79f6991cd9219c35a84b20ccb9b,2024-11-21T09:29:12.043000 -CVE-2024-32310,0,1,95217f99c322cd3f4cea52faf0fb225b1357b9327c27b20f6637eb9f13b6ebb6,2025-03-17T14:56:06.887000 -CVE-2024-32311,0,1,3d5fb9717ba37daf2f52baab62b3f1333bd66f37770e8417ec02dbdd2e1e6271,2025-03-17T14:55:22.163000 -CVE-2024-32312,0,1,844181f9a30bd412011c80f2c4a1c79a7da99838230d9c114f523924ab7d40bd,2025-03-17T14:55:51.863000 -CVE-2024-32313,0,0,153490c17f0b6399ba2596584df1cf198ad5b4a96c8ca8cc718597be0416ae3a,2024-11-21T09:14:43.203000 -CVE-2024-32314,0,1,9d36f828378f77d4e1c56dfe3af932057ce0e9a1415fdf56477b9c05e465b827,2025-03-17T14:49:03.973000 +CVE-2024-32310,0,0,95217f99c322cd3f4cea52faf0fb225b1357b9327c27b20f6637eb9f13b6ebb6,2025-03-17T14:56:06.887000 +CVE-2024-32311,0,0,3d5fb9717ba37daf2f52baab62b3f1333bd66f37770e8417ec02dbdd2e1e6271,2025-03-17T14:55:22.163000 +CVE-2024-32312,0,0,844181f9a30bd412011c80f2c4a1c79a7da99838230d9c114f523924ab7d40bd,2025-03-17T14:55:51.863000 +CVE-2024-32313,0,1,e2a7659861c7eac7cb5d701bb8ee81eacd68086c528653e045d9af5fb2b55745,2025-03-17T15:07:03.243000 +CVE-2024-32314,0,0,9d36f828378f77d4e1c56dfe3af932057ce0e9a1415fdf56477b9c05e465b827,2025-03-17T14:49:03.973000 CVE-2024-32315,0,0,824eff8bac17748e7bf7cd654e5f8024e0be06316d1204db92fdfc8433c871ed,2024-11-21T09:14:43.653000 -CVE-2024-32316,0,1,ae3f3d89c497c3c060f06bf75d2a43ba5e105c07b280f2a49423b2c43b62f055,2025-03-17T14:48:51.743000 -CVE-2024-32317,0,1,b9677273b274d139de7290dd31e485c01ef5341c718c0f1185b9a7b2a2793eb2,2025-03-17T14:22:37.120000 -CVE-2024-32318,0,1,60104426217eb64da595778cf0b6bdbb8693eb3251c3b7eee5a9af585e8582f7,2025-03-17T14:48:41.270000 +CVE-2024-32316,0,0,ae3f3d89c497c3c060f06bf75d2a43ba5e105c07b280f2a49423b2c43b62f055,2025-03-17T14:48:51.743000 +CVE-2024-32317,0,0,b9677273b274d139de7290dd31e485c01ef5341c718c0f1185b9a7b2a2793eb2,2025-03-17T14:22:37.120000 +CVE-2024-32318,0,0,60104426217eb64da595778cf0b6bdbb8693eb3251c3b7eee5a9af585e8582f7,2025-03-17T14:48:41.270000 CVE-2024-3232,0,0,2c9d9e43344177b612fac217b04717770253d08008e835bcd77c0569cf42e411,2024-11-21T09:29:12.230000 -CVE-2024-32320,0,1,1d8e350a6dfe40c9a6117ae793539f9eba20f70031e152d38b0d3a12e814143b,2025-03-17T14:48:17.427000 +CVE-2024-32320,0,0,1d8e350a6dfe40c9a6117ae793539f9eba20f70031e152d38b0d3a12e814143b,2025-03-17T14:48:17.427000 CVE-2024-32324,0,0,8828d94aa24570bc8993b42133e63d51ff9afadc8771133a705602d8a10a009c,2024-11-21T09:14:44.750000 CVE-2024-32325,0,0,f639496574cd83b9286fd5cbd6f3e37f002defa50201a3f772a706b3f9717989,2024-11-21T09:14:44.973000 CVE-2024-32326,0,0,8ae7deade8adc8456f5a8f95489b526fb0b9374c20958af36e970ae9a8ba1ba4,2024-11-21T09:14:45.217000 @@ -258771,12 +258771,12 @@ CVE-2024-3320,0,0,416b79048009667ebea2a9250393ce863c4f05e79d329ab4818e89c87484d3 CVE-2024-33209,0,0,7f68ce559f6d5a043afde8eaf0e39e7a82ae08dfb2b4a434c4b089d0c845812f,2025-03-14T16:15:31.387000 CVE-2024-3321,0,0,906a377fcbe64ef5b99950eb8ca518c2208c9c2ac4850be5792619fd12ba9f83,2025-02-18T17:10:07.637000 CVE-2024-33210,0,0,73743f20708c4f9e949787dea033b0608d5587bb97ca1e4ca545d2d98b4d206e,2024-10-04T13:50:43.727000 -CVE-2024-33211,0,1,58f74ab7cc7ee129b2e9f964a0e64b01513d4f0fd4e31fe160615cdcaa0c33bf,2025-03-17T14:44:28.937000 -CVE-2024-33212,0,1,1fac1ac1c481234d6efcb85330dfa37e8ba2b50c7647238bf047ee9ef6f73cd4,2025-03-17T14:44:45.820000 -CVE-2024-33213,0,1,eb6dd6345add1f88486bee4d9c6128a4e1692927bed41eac0966a5513e8ff167,2025-03-17T14:44:21.210000 -CVE-2024-33214,0,1,56350296ba4808ff9c81e227aa1b8eff44e0f4abf109943208c9b9969a77b509,2025-03-17T14:44:58.123000 -CVE-2024-33215,0,1,61a8842bfe98383f9bb20abbd381b7b17ac6aa56f197edcdf2fe2105f94c1cac,2025-03-17T14:45:19.080000 -CVE-2024-33217,0,1,4c54374c812181a2a737422450c4bd35f269c0c6a31934105ba5b02d45607f8f,2025-03-17T14:43:29.630000 +CVE-2024-33211,0,0,58f74ab7cc7ee129b2e9f964a0e64b01513d4f0fd4e31fe160615cdcaa0c33bf,2025-03-17T14:44:28.937000 +CVE-2024-33212,0,0,1fac1ac1c481234d6efcb85330dfa37e8ba2b50c7647238bf047ee9ef6f73cd4,2025-03-17T14:44:45.820000 +CVE-2024-33213,0,0,eb6dd6345add1f88486bee4d9c6128a4e1692927bed41eac0966a5513e8ff167,2025-03-17T14:44:21.210000 +CVE-2024-33214,0,0,56350296ba4808ff9c81e227aa1b8eff44e0f4abf109943208c9b9969a77b509,2025-03-17T14:44:58.123000 +CVE-2024-33215,0,0,61a8842bfe98383f9bb20abbd381b7b17ac6aa56f197edcdf2fe2105f94c1cac,2025-03-17T14:45:19.080000 +CVE-2024-33217,0,0,4c54374c812181a2a737422450c4bd35f269c0c6a31934105ba5b02d45607f8f,2025-03-17T14:43:29.630000 CVE-2024-33218,0,0,3c149154fd4426d9bbf328240adb7ac37d04e71a3806e619e61d6923b3e493ad,2024-11-21T09:16:38.573000 CVE-2024-33219,0,0,f1d4ded55c2cfb7f4b8182b8c5cfbd26721085ef662a6bdd847bb406ef99c49b,2024-11-21T09:16:38.810000 CVE-2024-3322,0,0,3569c930679c345a206f9de2f09d0845641fdd7878d98bf5028a601a996c08f7,2024-11-21T09:29:23.643000 @@ -260113,7 +260113,7 @@ CVE-2024-34958,0,0,5e861cbc1168ecefa878eb227b4ed45568602ecceb1ede6547cf9ed55d5a5 CVE-2024-34959,0,0,5f053d21c7ac989e3498f047de1d1fb2e6608016c419ff921f94bcf08e6b9749,2024-11-21T09:19:38.680000 CVE-2024-3496,0,0,9ee5c448c8f35a387d0158b70db014e643a7fde301c0d290c60d3583797cd49b,2024-11-21T09:29:43.700000 CVE-2024-3497,0,0,7c1d743bd5600a9278e2e02f99fcf1c8799f4b5d39529d8424f4a65cffe8827a,2024-11-21T09:29:43.880000 -CVE-2024-34974,0,1,4ab0527a72738082114c90936e127bb0088265a2397083f2845838f9b2cb31f7,2025-03-17T14:50:09.420000 +CVE-2024-34974,0,0,4ab0527a72738082114c90936e127bb0088265a2397083f2845838f9b2cb31f7,2025-03-17T14:50:09.420000 CVE-2024-3498,0,0,55cc0f94efbe9216181c2260faf13c1bf9aa50a4288184a8cd78e0c3a2a65720,2024-11-21T09:29:44.037000 CVE-2024-34982,0,0,ee0288804a2e56d5b1482976ce368ea06f5038c8ea5ba5e7f9197ebc2610394e,2024-11-21T09:19:39.110000 CVE-2024-34987,0,0,9ac391e6c82792d3e31f2013a6dfbc08649da34201c0ddc70d566a68eaae6636,2024-11-21T09:19:39.350000 @@ -260452,7 +260452,7 @@ CVE-2024-35512,0,0,0afe231c1ea36b0d13401bde8a419e47a50bb6e87f6d4c2af3d35094a0590 CVE-2024-35515,0,0,e3f924f4834b5eb1ebfdf779ac27355de9183c05a6013914f0dcda3fd063b221,2024-09-20T12:30:17.483000 CVE-2024-35517,0,0,c7cdf02c1970c9c2176ddeedd956f713abdccc5615fc0ba85b7883c202e8aed0,2025-03-13T17:15:31.850000 CVE-2024-35518,0,0,ed43d8b510042d85d4d70b9e26a0aa89fa633afe29930e8ce1f0c2da0c30d3cb,2024-10-16T17:13:01.933000 -CVE-2024-35519,0,0,cff6e948de7094b4df7bc2d5d1a9ed3cce175104feb6f898be67c637a8cafcd3,2024-10-16T17:17:57.140000 +CVE-2024-35519,0,1,d996ed05980655c5e66281da4afe0595370eee243c27f5ea4e81f512d40b8995,2025-03-17T16:15:21.827000 CVE-2024-3552,0,0,5a891e6b590ead1943d1c08be3fb48a5cfa3c2082a832a9c98395fe2dbc16369,2024-11-21T09:29:51.677000 CVE-2024-35520,0,0,7a7140eb6223b1e15a30b238cf928c4beb91633fbb52e20d4cf0ea71e9a80fa2,2024-10-16T17:14:31.443000 CVE-2024-35522,0,0,6930d234855fb8d5df8877247f1aefb38d626b28ef4e93b23190d5f8f37d693c,2025-03-13T17:15:32.013000 @@ -260484,12 +260484,12 @@ CVE-2024-35561,0,0,7380da6a2a693f02cb738117dc9a508281e4582638ca5f6f2c2f37dc2546a CVE-2024-35563,0,0,5d5fb2577032a8afddffa93556e4923f3b21e76b0661ae4923c7fa2336020e28,2024-11-21T09:20:27.920000 CVE-2024-3557,0,0,8eb6b0b137d4e78ee7e29e4557ad33b22d9813f3ad7e659bee392f7698571fda,2025-02-11T15:54:54.590000 CVE-2024-35570,0,0,8afae08e8e5d5014d364cd231ef2a1ddae088a07503096b8ac4065659f43a8ca,2024-11-21T09:20:28.183000 -CVE-2024-35571,0,1,b3e7997f2a296677d2472c966a9dfc22da737ccdb3c4e842df91625defe0857d,2025-03-17T14:28:19.317000 -CVE-2024-35576,0,1,0b2f6c8716ccd82dba843bf9e434b4e500939846ee0d37cc3ca6fd830572f0f6,2025-03-17T14:29:25.793000 -CVE-2024-35578,0,1,bc442d1832f0eb4b0fd21fa5e6bbe75963fcf589ce32b290ba1d8ea7936cb9f6,2025-03-17T14:29:37.593000 -CVE-2024-35579,0,1,0a1ec2ded2783b2247aa269435ffbd3163f489d6a5d20904d256bbe9471ec973,2025-03-17T14:29:46.353000 +CVE-2024-35571,0,0,b3e7997f2a296677d2472c966a9dfc22da737ccdb3c4e842df91625defe0857d,2025-03-17T14:28:19.317000 +CVE-2024-35576,0,0,0b2f6c8716ccd82dba843bf9e434b4e500939846ee0d37cc3ca6fd830572f0f6,2025-03-17T14:29:25.793000 +CVE-2024-35578,0,0,bc442d1832f0eb4b0fd21fa5e6bbe75963fcf589ce32b290ba1d8ea7936cb9f6,2025-03-17T14:29:37.593000 +CVE-2024-35579,0,0,0a1ec2ded2783b2247aa269435ffbd3163f489d6a5d20904d256bbe9471ec973,2025-03-17T14:29:46.353000 CVE-2024-3558,0,0,806a627b7995e540082901eb452bee64eb9c210d553e62c8939af8bafa2afc2d,2024-11-21T09:29:52.313000 -CVE-2024-35580,0,1,a70e5817661c56e153ec4a362a204fd0c2842d95ad67ff6dc7dbd4c29db3f9dd,2025-03-17T14:30:14.210000 +CVE-2024-35580,0,0,a70e5817661c56e153ec4a362a204fd0c2842d95ad67ff6dc7dbd4c29db3f9dd,2025-03-17T14:30:14.210000 CVE-2024-35581,0,0,3c0269d31917fe4b6dda12688a6432ba86846de116e94a75b6693e25e32dd641,2024-11-21T09:20:29.543000 CVE-2024-35582,0,0,26b97611eff84fb1ed42deb9cd9596657abd6a14c740e6718f4284e829397435,2024-11-21T09:20:29.780000 CVE-2024-35583,0,0,1864da359a34199fc23d754f58bc6d59d8237266e0c1c308b6c5fed86ec031ef,2024-11-21T09:20:30.017000 @@ -262942,7 +262942,7 @@ CVE-2024-38448,0,0,0417f67feb174d17884f941d52455f2d13f88d869f807172ad5ede5ba4941 CVE-2024-38449,0,0,567ec77a417153c4a9068f8dd75c90462ba9c3e28b98a3d42719e32f9950215a,2024-11-21T09:25:54.520000 CVE-2024-3845,0,0,ca24bca207c074b469609aed2b8f96045d7dff9c57a2dac79d0d5320547bdd88,2024-12-19T16:16:50.080000 CVE-2024-38453,0,0,b06e1636caffb9890de032863731515d8cd548e73c8a186d989d9233397e67b7,2024-11-21T09:25:54.890000 -CVE-2024-38454,0,1,64eed38da53ef8c03c8f1078566da2bd9e5bf58fb0d77207f6e3bddb5bcdc15f,2025-03-17T14:15:17.887000 +CVE-2024-38454,0,0,64eed38da53ef8c03c8f1078566da2bd9e5bf58fb0d77207f6e3bddb5bcdc15f,2025-03-17T14:15:17.887000 CVE-2024-38456,0,0,a95fe1e20c3d17c8c8ab011aca7934f84a81097f592ad62257acad46a3f59fc7,2024-11-21T09:25:55.710000 CVE-2024-38457,0,0,530742572f3e0d8f598ff8d44b3e96d3e92201497f084c24a910b04443ee772a,2024-11-21T09:25:56.167000 CVE-2024-38458,0,0,316662ad255ffac546a1dfe9a2a83c5c4561a343c7d52202d1e09ec5b0c948b5,2024-11-21T09:25:56.687000 @@ -263460,7 +263460,7 @@ CVE-2024-3907,0,0,d33abb7499d8bdfc0449d1ce0b19211840dd2ba2d6c9eb538b65c815ab9ef1 CVE-2024-39071,0,0,bcf49297986e31d2062e985568f055f9ac47c400defe91dd2a64b6e8784beffa,2024-11-21T09:27:10.997000 CVE-2024-39072,0,0,7c7576a6aaa8d080d42e8873fa54dabc8fa57d12eb24e8fb3b3b37f2c1e5a476,2024-11-21T09:27:11.203000 CVE-2024-3908,0,0,9ae7a3395f82376068b28a5a66b47db9023d7d608b35c761f458f643cc6e3617,2025-01-17T21:16:07.327000 -CVE-2024-39081,0,0,29ab3d686e2b6d4ec4a310846650a5756a54f10027b101688be62026057df595,2024-10-01T15:51:30.237000 +CVE-2024-39081,0,1,1ea98431957362ab56a3af379eeef002d3bbd99853a222b010a3be68bd797b7b,2025-03-17T15:15:40.787000 CVE-2024-3909,0,0,d5574f4925d57273c75b63e724e2aae982f973388b6e621ddd87893b5d997ccf,2025-02-07T01:57:01.643000 CVE-2024-39090,0,0,c1fb932b3c7852f6751439bcd02ca4ef3c48bbe1e8476802f1cae84e9705ca59,2024-11-21T09:27:11.500000 CVE-2024-39091,0,0,c140294e78a78cd7474377e032af5887e358fd95402a58bcd7abb93d413219ea,2024-08-13T21:35:02.617000 @@ -264555,7 +264555,7 @@ CVE-2024-40774,0,0,acf9484778c188d9655881f6296c67ea4d7b41e7dc81159e8bc4a6eb0bc45 CVE-2024-40775,0,0,5a1c8ebb97a8c67c049206c150e713e1edac12079e5342341c02eb94b0a883fc,2024-11-21T09:31:35.600000 CVE-2024-40776,0,0,691f82117c272b7fd0cd01aff97f784b0cb450c83a62bf9d7355e7e0bac6f051,2024-11-21T09:31:35.730000 CVE-2024-40777,0,0,bf2e73d1e51114335534953fa94ef2030805d9b14766f738828fd8a8e8382b37,2025-03-13T18:15:42.710000 -CVE-2024-40778,0,0,9f33a78120305618c4af695048e22760029d8fa22ae1c9b06ffb0fc260e027df,2024-11-21T09:31:36.180000 +CVE-2024-40778,0,1,64d5396aeebd1c13f8b94b453a1148c6cc9990d32eb0ae6a5b1d3d8f90a687dc,2025-03-17T16:15:22.020000 CVE-2024-40779,0,0,4810c08861f7a7e93148bb6f6c863da610e4431418a7b295d8202fb87ffd6be5,2025-03-13T17:15:32.393000 CVE-2024-4078,0,0,876c2d85ad15b40998fa1a091e99c40bdf3265b4dfc0dc2a74b816b191e7aeb1,2024-11-21T09:42:09.057000 CVE-2024-40780,0,0,79bbd0100ae5fa04270605f8c0a68d5757f3644ba25f4a2aceaba1392b1c61b5,2024-11-21T09:31:36.483000 @@ -264627,7 +264627,7 @@ CVE-2024-40842,0,0,d97caac03d983e83f0a43de14b1f6084706969aaff86e517019fa27ed6e96 CVE-2024-40843,0,0,8829e3a23cccba1ae50f91356127ff0b529c10fe5f02005e5dcf2ce88d5f4ad0,2024-09-24T15:02:53.987000 CVE-2024-40844,0,0,913ad32f130ba48f710de944124bb663e932b9a1efef6f615196eef21a07dff4,2024-09-24T15:55:13.020000 CVE-2024-40845,0,0,ff022e47079c0e2640046a45a9238cfa77665c1eec1ab3ac2bfa695dbfb76ea1,2025-03-14T17:15:46.070000 -CVE-2024-40846,0,0,1ea51383631697ac05bd799324e950d4244ea53c4b1f9e46959f570672d5cc27,2024-09-24T15:56:04.193000 +CVE-2024-40846,0,1,9b851b4ce2280168886b830fe034334f0fa1485f27e31834954a719ee17a0457,2025-03-17T16:15:22.280000 CVE-2024-40847,0,0,ee5396e6f19805c5499c62b220104fc60114c82964b16e0b3e6ff332e23edee0,2024-09-24T15:56:35.753000 CVE-2024-40848,0,0,86d3355851a7ddfb425292a80fa877eed599c8da4dfe9e7c1117852b3f5a865a,2024-09-24T15:57:03.893000 CVE-2024-4085,0,0,787927bdbc60dd0adde121aa412a76d92ada213a43fd5512122c43f33043e993,2024-11-21T09:42:09.953000 @@ -265251,7 +265251,7 @@ CVE-2024-41717,0,0,c9f80448cdc976f3002da313ea63287cd63a05c44fc79274549925f22ad72 CVE-2024-41718,0,0,7651686104923551937c1bf922db9a37da5f3ad1631e564fe3c0dca9a6e79a72,2024-09-03T11:15:15.050000 CVE-2024-41719,0,0,956e2e46ecd8d6d51eb543283c485bdbe6c1c212920fce61dcbdebb41b6ab5ce,2024-08-19T18:40:35.203000 CVE-2024-4172,0,0,d6b7c09501839c8bb777c2249469012ca336046c5016969f464e5a87f52e4f10,2024-11-21T09:42:19.780000 -CVE-2024-41720,0,0,bf5caaca1d1c0f9c7639ac2e1a39cd9b2520bfe388b5fa56d6221ad980dbad3d,2024-08-30T17:49:42.047000 +CVE-2024-41720,0,1,b01ef427e92d1d2983dcb1db6470cf979c467dfd1906252bc6d24ffe7bf5ce85,2025-03-17T15:15:41.073000 CVE-2024-41721,0,0,7f76b2819dc96136f1439ee00033d6c65dd7e088f9d1945c138673cd979cf120,2024-11-21T09:33:03.463000 CVE-2024-41722,0,0,3545357ca4cf0733ba3a03ead3658e160a6402ae8d95909ac1278d94b7906585,2024-10-17T17:15:11.667000 CVE-2024-41723,0,0,d9b662665d6689abd8fad15aad73e5cccc07ff290e5d3363e7616d9cd67dea5f,2024-08-20T19:26:24.033000 @@ -266080,7 +266080,7 @@ CVE-2024-42633,0,0,3cf92e5e6df7470ec76959fa70236d85e9e9942650bdcd767e84cd8dbdc27 CVE-2024-42634,0,0,e316dd50ac7dd29fbd6d3ac410c9dd2e383d0fa3a5124d95a220d9396a05eb2a,2024-08-19T13:00:23.117000 CVE-2024-42636,0,0,22ddef02b2b67750bcb1bcbe76c7dedd5d6120870d17cf9424899ba2207db432,2024-08-23T18:35:04.560000 CVE-2024-42637,0,0,7ab579a16c75673edf60ac8a3c57e5d93e8a15ee1bb0faf828bd0c37998bf12d,2024-08-19T13:00:23.117000 -CVE-2024-42638,0,0,ac9bbef08e6bc8d075de5fabd8e57c50e22d1bd3829280777a02f2fc86f533a5,2024-09-11T12:53:03.987000 +CVE-2024-42638,0,1,2c1b857f0b965ac40814489cb21be9b393c58462d1ddf36b59e226e27acdcc88,2025-03-17T15:15:41.303000 CVE-2024-42639,0,0,ae37b1b7ad01c960465c980c3af4377ff9ccb779a7ecb0e0e91e2f8a45079104,2024-08-19T18:35:13.310000 CVE-2024-4264,0,0,a9295252e6ae8012e96f6ab16d3bdbd8ae0aa19058b71f0f60f84b3b14a65d86,2024-11-21T09:42:30.250000 CVE-2024-42640,0,0,e2483a866051d6ad5491e120ca1e63baafa96b595191cf3ff24d316cd3ae355b,2024-10-15T17:35:04.623000 @@ -266172,7 +266172,7 @@ CVE-2024-42797,0,0,a0ec52c2cf58f1862091392f86425048a4fe5474acb22a8c723f2384ed1b2 CVE-2024-42798,0,0,e197fd9ce330736de9b6617b425d7a631dcb01b6b873d046a3450905db719d3a,2024-09-20T12:31:20.110000 CVE-2024-4280,0,0,b3797ff2151727941d9c366b289b5d3e0b88350afb872404e2bdcfe0d7122163,2024-11-21T09:42:32.167000 CVE-2024-4281,0,0,61e5371b0a3255e76472e43eacd6c1c0207d9397155487a12c704d61028dcc77,2025-02-03T18:53:40.487000 -CVE-2024-42812,0,0,5b6b5e8da69ab6d1e69fde466b7b645d7b049bb91566931274a41b943eb72519,2024-10-10T20:18:11.100000 +CVE-2024-42812,0,1,163e07a54ddac84e7821d0efc800bc7e7d10ae1d47903174af8c3b5ac8976f4b,2025-03-17T16:15:22.480000 CVE-2024-42813,0,0,4b20a1ebb3665953fa718122bfa12aa762b410b6814a21600ddb5075a5bcd461,2024-08-20T15:44:20.567000 CVE-2024-42815,0,0,b0c824ea019918de59fd32b154af16c923b2879fc083ee857cf41b3c11ab802d,2024-10-24T20:35:07.330000 CVE-2024-42816,0,0,f48cdbf32ec6ef2592c0debfd370e60e5e7330faf2228d3c835601d4668d4327,2024-08-27T14:35:07.077000 @@ -267383,7 +267383,7 @@ CVE-2024-44179,0,0,974c324437d0b47843308bfaa610ce0667fd15147952f788efc7cb0e89824 CVE-2024-4418,0,0,3c06db20d6f1d09e33f3b0bdaf6cae857194aef327226f05897e6eec0e0197ea,2024-11-21T09:42:47.483000 CVE-2024-44180,0,0,5ee06b0d7bca5ffa3ec5bcd8648dbe062fdbe7bdbeef38c79adf1789513da422,2025-03-13T15:15:47.787000 CVE-2024-44181,0,0,6d28050393eadf03569f8e946e89b01b126b14e424563728581983befe65d626,2024-09-24T18:39:12.733000 -CVE-2024-44182,0,0,04606bfc14692c29087743c405a078f0d5557bc3003fbddec3412b7f89cde6d4,2024-09-24T16:52:49.767000 +CVE-2024-44182,0,1,ac4e55d3d655660c84b73b56753bde7e522a5246e044351d25e0f2bf23fe9103,2025-03-17T16:15:22.743000 CVE-2024-44183,0,0,4149bdff7c46674028b2ef646957f052460400a3fc47e7d2c1fa4e9e58758dd0,2024-09-24T19:04:51.030000 CVE-2024-44184,0,0,447a47e4658127a2837b0479ea9a5d05984bdae7b57e0cba1d6a39eb69a9e112,2025-03-14T17:15:47.083000 CVE-2024-44185,0,0,e79c7c7c64fe69058030fb9e5019d8c77d80d8475cec6554b7ce51ad3262c5d4,2024-11-04T22:35:07.400000 @@ -267392,7 +267392,7 @@ CVE-2024-44187,0,0,6e307fae7f39341ae1e3d2145100bc4c0d967c8f95d1fbcf9237dd6646d09 CVE-2024-44188,0,0,c8f2a4c522fb4771ddead88a10e0932d80644ae68f72790c2ad2ddab15746318,2024-09-24T20:38:27.090000 CVE-2024-44189,0,0,74bae7e0ea0e127ff0dd8bcfea5ffa0e13e07892dd1a7bf2df17de4205cd86d1,2024-09-24T18:33:02.477000 CVE-2024-4419,0,0,ba2477d3286ec6ab4ab62bfd9b86b02d79b23b6497b6c9703950ad337d472a29,2024-11-21T09:42:47.617000 -CVE-2024-44190,0,0,ec036b1f60dea569eef287561200a33a41aeefcf64eef3b61618ae6ebfbc5800,2024-09-24T18:02:25.313000 +CVE-2024-44190,0,1,205b49df09d63d183c3d70f284647d3e21912a1bd3a11fb939aa6205e52e83f2,2025-03-17T16:15:22.937000 CVE-2024-44191,0,0,d240f1b8433a5ce6dbe87e65698049b28e8c35859d01c776684fda07dd899ed0,2024-12-02T15:00:03.333000 CVE-2024-44192,0,0,75b6f810803038485a8963aa8a2da5d201c114054ba6e38dd596e86b7f4c45cb,2025-03-14T13:52:46.090000 CVE-2024-44193,0,0,8c85a5b1d1e4b95c546e1cb6528a307b8abbbd3125eeeb473d768fe58c08684e,2025-03-13T16:15:22.330000 @@ -267518,7 +267518,7 @@ CVE-2024-44349,0,0,f4076c92699646fac056b5f902c2586d1873dbf360d4301b9495d86320d7e CVE-2024-4435,0,0,06b2007717f2558612ff7b1bac43c1842266dc6b08a62f92f48b16c0b6a6a190,2024-11-21T09:42:49.523000 CVE-2024-4436,0,0,a451cdf02f00c42b52dc456e6ced80384ccfed144a5215d51b7aa1b8767df436,2024-11-21T09:42:49.650000 CVE-2024-4437,0,0,14e097453816327bd19cd8608e37f76c7334859aa8e75d68b5da0f4f7dff0956,2024-11-21T09:42:49.783000 -CVE-2024-44375,0,1,9243f21edabf524d6761efb0a0538b70f40b143b18cc1ef371c10986ee2fa433,2025-03-17T14:15:18.267000 +CVE-2024-44375,0,0,9243f21edabf524d6761efb0a0538b70f40b143b18cc1ef371c10986ee2fa433,2025-03-17T14:15:18.267000 CVE-2024-4438,0,0,49876e95eb9df71ac9c7dd3587ab152f573260176409b44ded5748ca1e66607e,2024-11-21T09:42:49.907000 CVE-2024-44381,0,0,3c86412857ebb67acb5943a51cbfb96a80661d812226c9b7ffbfcc8d631ec073,2024-08-26T13:55:17.583000 CVE-2024-44382,0,0,21a48868750ea6e1329a06b0241ed837e737f998865b6a3d735cf782e0e75315,2024-08-26T13:58:17.047000 @@ -267994,7 +267994,7 @@ CVE-2024-45219,0,0,0207d62ee0c22585aabf4fb4b193e85307879555f8f6463f2271db6316078 CVE-2024-4522,0,0,dbc4ffedcd45bca0cbfe41e8be47bfe3bce1d44e2a1d7a7cfce96f5427fb8a11,2025-02-19T18:01:42.270000 CVE-2024-45229,0,0,e6f4b951ab4cb6557898e8dda5ef991ae18e79e9522f36029d01e34792e47605,2024-09-26T13:32:55.343000 CVE-2024-4523,0,0,a74135a93225b0e154a68a2388ec7c937763f7be92b985b1441f5bd038a9421a,2025-02-19T18:02:04.190000 -CVE-2024-45230,0,0,b32a7bc3aac6e6a631d102bd87a26161a3a82d396f0e18039434e50defcf2070,2024-10-30T17:35:09.360000 +CVE-2024-45230,0,1,658a2427b1d48bc2b92c3a07c96d97e77eb6fc15925bda80d7022b9b94beb986,2025-03-17T15:15:41.520000 CVE-2024-45231,0,0,5b5efd83c2ceee1632018dcf96a99cae72127f69f0982ab5e6486b643f3b1fdc,2024-10-30T17:35:10.147000 CVE-2024-45232,0,0,ad628ab784d85d04c233017d4257f413ebcad2a3f1d3fed06a030425169736df,2024-08-30T16:34:39.270000 CVE-2024-45233,0,0,64ddf6098505acd9ba4d7fef0179fc1359bb7be441ffc9618d83cec4d0e0cc03,2024-08-30T16:33:56.720000 @@ -268635,7 +268635,7 @@ CVE-2024-46257,0,0,2e21e52a1504a13633477840dbd557e9ad05285ae3938c3634988f0489dcf CVE-2024-46258,0,0,f0370fbfdad86ce1dfd5697a2aae76d6a5956ed64072b68df4d04522255e7fe0,2025-03-14T16:15:35.750000 CVE-2024-46259,0,0,813dd7d277ffd375ba94a36a8b6d7e69da029202db3e5b5b3ff3980e7acd00a3,2024-10-04T16:40:29.857000 CVE-2024-4626,0,0,e6a81841b054989b62fde9d622901d07198d294f1608fb279a45bf1cc90a81a1,2024-11-21T09:43:14.590000 -CVE-2024-46261,0,0,dd8d2b6f7a7b0a0e67462f6e66776310899d7316eb8beab0a1b884f1281b7ee3,2024-10-04T16:40:11.640000 +CVE-2024-46261,0,1,a63083e78a302200fa5c011996104c027553781607ce65625aeab1fca9bebe82,2025-03-17T15:15:41.780000 CVE-2024-46263,0,0,72d71ad88db3e515c73d65b3f46bcb36aeb4d4facd4ca04d090b0bfd15aec6df,2024-10-04T16:39:33.890000 CVE-2024-46264,0,0,be06e296b4e59e09e64dbaeda765f7618a669d78bb93ff90d843b411140f4d6c,2025-03-13T16:15:22.753000 CVE-2024-46267,0,0,aeae934bd4bbfbeed8faaf8bea421e6ed5b96de7ff47d363e97fe3a805aef3bb,2024-10-04T16:38:16.390000 @@ -268776,16 +268776,16 @@ CVE-2024-46564,0,0,e3650601e6103c25c0638469ece4f175000c7656b133c286eaafe2153db2c CVE-2024-46565,0,0,f5657924f5aa18ab256492c2fb84533af8b2d2b6dc20c817da65bf4bfa08a6a2,2025-03-13T16:15:23.200000 CVE-2024-46566,0,0,49eaed23e4e0e48e2985ae061fe7a0e7c41e367260374586bae04acc04a09c1c,2024-09-24T16:41:58.953000 CVE-2024-46567,0,0,db156d8caa136d073df3062cfe75a136c226f225cc5b035bc1124c685eab2380,2024-09-24T16:42:00.340000 -CVE-2024-46568,0,1,e7f46f518d6a5bb938dd4a39cbfd460f3e573d24d636393978cf638b8a830521,2025-03-17T14:15:19.110000 +CVE-2024-46568,0,0,e7f46f518d6a5bb938dd4a39cbfd460f3e573d24d636393978cf638b8a830521,2025-03-17T14:15:19.110000 CVE-2024-4657,0,0,da1cc5f0f06e951757a7d9aa2ce7edd95b85064e3f725733e8932ef7a9a9ba36,2024-09-26T13:32:02.803000 -CVE-2024-46571,0,1,d2aefd540d7a3f69a6c63893a70408e771411a89c3ea4f3a40ecac30e52b1a2a,2025-03-17T14:15:19.380000 +CVE-2024-46571,0,0,d2aefd540d7a3f69a6c63893a70408e771411a89c3ea4f3a40ecac30e52b1a2a,2025-03-17T14:15:19.380000 CVE-2024-4658,0,0,8e8551e2dad8544932822e63f34e98151cdfa3d6ca2a97c2637382b0eddb6d52,2024-10-15T12:58:51.050000 CVE-2024-46580,0,0,57ce23079d22c520f558cf33d89b6b4b97b97ee6fc7acbd2cbcf182fb2bd3f83,2025-03-14T15:15:42.990000 CVE-2024-46581,0,0,5462b101fb440bc501a98cc921603a2137f1839db74d9038e8e4ca66f70ebf73,2024-09-24T16:41:36.533000 CVE-2024-46582,0,0,1b8144bd030454843ac8c6a6ad66282bbf8e59b632d02a0e7a976a686d4f89f8,2024-09-24T16:41:29.377000 CVE-2024-46583,0,0,cf382f8da6cf6ab76f4c4d49ea272d0b3efa763944ca8b322f6d82dbef52da5f,2024-09-24T16:40:48.437000 CVE-2024-46584,0,0,08f29613e1e223adeeb5f6aff9b13cd88155533380249640b96e771274344e9f,2025-03-14T16:15:36.087000 -CVE-2024-46585,0,0,a18d0a63a6b2b42b6941a64b34bc19ec29a92f52b6007f5fdb56b522348985e3,2024-09-24T16:40:52.817000 +CVE-2024-46585,0,1,dc7ee54543f1dde85b7ec955c3e56c63aab70e8f4e8f2066fc5d9912f9a62f8c,2025-03-17T15:15:41.990000 CVE-2024-46586,0,0,ee7cb8ef34e89fb8c26b959b710d18e573af1a83392db3e9746a1d21e5db18c8,2025-03-13T16:15:23.420000 CVE-2024-46588,0,0,ee187a25ad0433069fae2e999c985d8a984d51cce26c5131cb4acdf3744f6ff1,2025-03-13T20:15:23.363000 CVE-2024-46589,0,0,c8c4ed997bde83e782ce97e84f35739533cd523937539c1183a8f4a87e466600,2024-09-24T16:40:56.763000 @@ -268830,7 +268830,7 @@ CVE-2024-46646,0,0,3ad790cc150f750207bf72589b58d2b1e48d19f5476d9a762c46580efdfdb CVE-2024-46647,0,0,7bc10d0a5ace11d00a9f494ec434df7b8a97032dc04f423288f06d928d9c96bd,2024-09-26T13:32:55.343000 CVE-2024-46648,0,0,cea6952399c03083afaed00b1dba7073b876c8ac942699bb14f150aeb69140b2,2024-09-26T13:32:55.343000 CVE-2024-46649,0,0,e8b2cd300844f1c59beee3ac2f05f3f00e936271390dc0616870dbd7a27079c3,2024-09-26T13:32:55.343000 -CVE-2024-46652,0,0,bb4315f4676870a2958627d6a10346591627716380bc9417bf1af7b8f8172137,2024-09-26T13:32:55.343000 +CVE-2024-46652,0,1,9d991062832040a51c98317f39646415912fd91ef88373c07e33763486519d6c,2025-03-17T15:00:28.117000 CVE-2024-46654,0,0,cf5866a14faf18f30b0ea2b34d406414f89a6e2e1ad943bf64619bd6e04b1142,2024-09-26T13:32:55.343000 CVE-2024-46655,0,0,619756e28facd4dcca44a3c94ed931cf61b4408f1c51eeb5eca49c9e1ace2a15,2024-10-02T15:40:36.090000 CVE-2024-46657,0,0,a5ced2fc9af0ce563815dae98d1fb612587af65b11df31ab1959075bb6481834,2024-12-11T16:15:11.770000 @@ -269211,7 +269211,7 @@ CVE-2024-47043,0,0,545b6a3e9a09205d79f382548c2425bf3a6f5f54e66a5814547773795537b CVE-2024-47044,0,0,f5082c6425317782526cc321eb402e63d4e994b10a2cbcc319dbb6c80851bcb7,2024-10-17T02:15:02.840000 CVE-2024-47045,0,0,0657652e435463f24842c95bfd3794a2b4734328367fc4112685852a971c284b,2024-09-26T15:35:29.950000 CVE-2024-47046,0,0,38ff0cbe92ddeab67ccca0ef4d9e871715c7398a3c7a0cba348e5d2c467fe60d,2024-12-10T14:30:44.280000 -CVE-2024-47047,0,0,f47c9375ff4e3500f3e47f366e397f42b48ae882b1f697904f00fc82abd32028,2024-09-27T17:03:35.507000 +CVE-2024-47047,0,1,1c34e54606c2eab1848cff96c6327ee01c896bfdb05096645ec8e67d294f53a3,2025-03-17T15:15:42.173000 CVE-2024-47048,0,0,425cce79ac1ff694ab4c7cef97a6df0f5610cb2bf223796f917dc53ac24edec5,2024-09-26T17:12:07.440000 CVE-2024-47049,0,0,9435c3feeabad953f768be0dab3a8c5de1fda327c2cd4383c7019bbd8d92ff47,2024-09-27T17:09:46.980000 CVE-2024-4705,0,0,70c389ca67ab3379e01e7be3997ee96e6665f685a382d4b4294d25153d98d41e,2024-11-21T09:43:24.977000 @@ -270019,7 +270019,7 @@ CVE-2024-4794,0,0,ba5e8059948a5c0a4f791ac25b4a0f72919967b39511d7cf25159ce9a23713 CVE-2024-47940,0,0,8e131fde2b9324945d980aa8295564fd41e66188f4f5ae4e8bf40a16b2d3387b,2024-11-13T23:14:54.567000 CVE-2024-47941,0,0,c14597f29ad3a4a8a32128ea5b010d0814d869c0e2360c56651603c13be16469,2024-11-13T23:15:09.783000 CVE-2024-47942,0,0,9fd9d444dca917e28d81113767c42e076fb4284ec6797094859dd67bb9d3c6a3,2024-11-13T23:15:21.497000 -CVE-2024-47943,0,0,d4d5358ab48548c04867b54233602bd267d194af91388df45333461289a48f25,2024-10-15T12:57:46.880000 +CVE-2024-47943,0,1,2605433ead862e361b658a9b9169fc0a7f5ee408833ebd8e3eb2fb327521f605,2025-03-17T16:15:23.143000 CVE-2024-47944,0,0,2b62f766b4e887a556703c4ed0cb75befb46953f16e7999cc97a39c4906c4816,2024-10-15T16:35:09.410000 CVE-2024-47945,0,0,4eaa4330fd6e6ea36aef0bbee2681edcaf5e4575b714ff483b0a9415275f4700,2024-10-21T19:41:10.407000 CVE-2024-47946,0,0,8eff08d83a0e5f81c0159854fd0287a2f79c269d6589402493189cd9869f0a5f,2024-12-20T21:15:08.473000 @@ -270421,8 +270421,8 @@ CVE-2024-48821,0,0,4896dd6ac80918ca5a6581c0f1374f01a9628402f48179089cf11ce291dad CVE-2024-48822,0,0,118b043493af5b9e81bfea3d9d49d263053f84c00f596289e418351e3f2a583f,2024-10-15T15:35:21.887000 CVE-2024-48823,0,0,820531b706bf0ae61b396baa4f664ae0008d2999048381b1abb05d976c0f0ac0,2025-03-15T16:15:13.617000 CVE-2024-48824,0,0,ef0e492c00cab61971592279c200b5aa8363ba3f5e0c1c31feae3169bba9bda8,2024-10-15T15:35:22.403000 -CVE-2024-48825,0,1,ab1a99bd861163f7408d15d580b43382540b10b1ee2468dd0be1ab11f71c2d49,2025-03-17T14:40:19.617000 -CVE-2024-48826,0,1,98549302f2e56108c7370cc097f96237c01a98aadb40625859a37b9be6178797,2025-03-17T14:41:08.920000 +CVE-2024-48825,0,0,ab1a99bd861163f7408d15d580b43382540b10b1ee2468dd0be1ab11f71c2d49,2025-03-17T14:40:19.617000 +CVE-2024-48826,0,0,98549302f2e56108c7370cc097f96237c01a98aadb40625859a37b9be6178797,2025-03-17T14:41:08.920000 CVE-2024-48827,0,0,c634b09d4bbd789de675d443b25c2caa29782eefb799783549ddae73a70d3206,2024-10-15T12:58:51.050000 CVE-2024-4883,0,0,3222a4b5de828494b65ffe71a3476e5194064057a0c910f17c0414c5fa2f7db8,2024-11-21T09:43:47.157000 CVE-2024-48837,0,0,c666531ac1712e0acc73725cc5e667b645b27d27ad4753fd8829b02e6d5e3dfa,2024-11-18T19:48:35.353000 @@ -271140,7 +271140,7 @@ CVE-2024-49742,0,0,3c8ea0e80314a8acbdd42653f46a7083a0424366713a970835ba57a6d24ef CVE-2024-49744,0,0,fdf222f2037b17a852e00287bd367289c1e17112249d40b0fa59d066982c2c2f,2025-02-18T20:15:20.720000 CVE-2024-49745,0,0,3f919f7aa199c54c2341d3074c8c5b46e0ba6fcf2550fbd12aba17e82162ffb2,2025-01-22T15:15:13.707000 CVE-2024-49747,0,0,74e3d425dced680a101eb5b5a196b8328c60686662eb6d14028d30343cfb09a2,2025-02-18T20:15:20.893000 -CVE-2024-49748,0,0,96c462d25bc70e4cfdd949d00636813cde29c01482960052ab520457bf3fa949,2025-02-18T20:15:20.983000 +CVE-2024-49748,0,1,9234639dd18e0fb6aa52dd2164c77c6468dfa4953a72026bde79f96e9a60f327,2025-03-17T16:15:23.360000 CVE-2024-49749,0,0,f2d8d84256de3e70c30724c05f3ac65beb20293062d04373d0d95a5177f08b3c,2025-02-18T20:15:21.073000 CVE-2024-4975,0,0,7306049b298e2c8d2b7c91924a39c6bd95187aba6b38bd8d420b6dfbf4f5f2dd,2025-02-18T18:42:21.327000 CVE-2024-49750,0,0,b8c0592657dc23f5dade6581318fd4431bb1aa3486d0f4172a6b42fac1aa50c3,2024-11-06T14:58:19.993000 @@ -272274,7 +272274,7 @@ CVE-2024-51152,0,0,967cbcfc73dbc16287d55b13cbb722195fe5f82a6511062fdf0ca56b7f903 CVE-2024-51156,0,0,f6b77151c60afbaf8d53a59734fbafa7af1588cdd272b2836099779a91a2a862,2024-11-18T18:35:06.703000 CVE-2024-51157,0,0,bbafa78b8a50c8fb1e7d4159721fdaf4c3afe6250954e7dd9b5098d387a20e07,2024-11-18T15:35:13.060000 CVE-2024-5116,0,0,97d9473289980f5059782f77154334969f4be33ef111aeaaae73feb786442882,2025-02-10T13:54:20.543000 -CVE-2024-51162,0,0,fc3664ca89fa563880ea9e2ea8878b6d946a2785f6e53fbf0dd8a280da65bc23,2025-01-09T22:15:28.777000 +CVE-2024-51162,0,1,f7989da3f04acdeccd7ac3514256e7ada64944ea90830784c7f181e1b7a668f8,2025-03-17T15:15:42.383000 CVE-2024-51163,0,0,04a49ec72bbad9c9080a0d5c95af33578e7ecb7dcdb1c839f7d8c08ddead1ef5,2025-01-09T22:15:28.897000 CVE-2024-51164,0,0,d940764ceb362d708d88f9f5a08c2c1f5532b8b37b034d71dff6267e64a0a937,2024-12-09T17:15:09.107000 CVE-2024-51165,0,0,fb13fc4e35d92e7921bbef9ce68653c7bfa08c0c1cb970241bfa8c45e1d3cd41,2024-12-11T15:15:15.067000 @@ -274322,7 +274322,7 @@ CVE-2024-54018,0,0,cad6d12f1a14e927d37238581f95d0e8ab02634a89452232f8dadfac53c03 CVE-2024-5402,0,0,8a48be9314b3c9a679ac7b7baef4e61d2577cdb21f0001defb98f97ce31ab9a7,2024-11-21T09:47:34.947000 CVE-2024-54021,0,0,a405e55b9f793941d2f8b7e4f87a8497aa7210dc633b21052b904eb2f621ad43,2025-02-03T22:04:26.590000 CVE-2024-54026,0,0,723fec38eab4317b0780c9816dd56e900186889e5e56922795660677a81a6c2f,2025-03-11T15:15:43.307000 -CVE-2024-54027,1,1,b857dd0afebba3c3a0855e36a148a37650d6cd8239d1997ceedb384b8b957bbc,2025-03-17T14:15:19.613000 +CVE-2024-54027,0,0,b857dd0afebba3c3a0855e36a148a37650d6cd8239d1997ceedb384b8b957bbc,2025-03-17T14:15:19.613000 CVE-2024-5403,0,0,f4e58d907f2a672c85e38960e3074ec1cb3261646ec2ccae3d1a32d0c95159be,2024-11-21T09:47:35.097000 CVE-2024-54030,0,0,07c84f217a6fa368622d2a223843d19c0c7e728e80537c7c260b676bb124b4cd,2025-01-07T08:15:25.760000 CVE-2024-54031,0,0,e561fa8b1140e643c613ddbd502d702389ee48a6a06d0cb85808f49f71337f6f,2025-01-15T13:15:11.203000 @@ -276254,8 +276254,8 @@ CVE-2024-57556,0,0,e8fd8911a1905d71db68021bd5a772f45ebb1af2144cb7a20bd64489988a9 CVE-2024-5756,0,0,f306d50c688e90f1ac281dc052b52f0a73fe2794efab7031898c419d58649207,2024-11-21T09:48:17.217000 CVE-2024-5757,0,0,d27353d3a809fffc6956c99202ff019e529c86d532d278e7bed95c99f1ad6b65,2024-11-21T09:48:17.330000 CVE-2024-57575,0,0,10f9db09488c680e59179edd32f39ae852f953dfae5ffee53935cd40d92b886e,2025-02-03T20:15:34.597000 -CVE-2024-57577,0,1,c2ca740d64178d79e701f87d77435e5e110f6b93d81b486ce3155e5334b275b6,2025-03-17T14:51:55.140000 -CVE-2024-57578,0,1,f6ee105c596cfeff44d60f047426016c918d26affb6df36e058606aadb7fa62f,2025-03-17T14:53:41.467000 +CVE-2024-57577,0,0,c2ca740d64178d79e701f87d77435e5e110f6b93d81b486ce3155e5334b275b6,2025-03-17T14:51:55.140000 +CVE-2024-57578,0,0,f6ee105c596cfeff44d60f047426016c918d26affb6df36e058606aadb7fa62f,2025-03-17T14:53:41.467000 CVE-2024-57579,0,0,71c6bf8bc720debc6717572f5f0e278cc46ae7a1f04604c3faa7d343c2cacead,2025-03-06T12:46:16.043000 CVE-2024-5758,0,0,c078716fbf80b259c8ceac06415d3d039d4ef773f8ae701649c6b0b1483ee99e,2024-06-13T21:15:57.543000 CVE-2024-57580,0,0,7495bb79fd515807d3ed5e4e5262cac6c1e65f01a20fd431ab96a8bc820fc828,2025-03-06T12:45:57.383000 @@ -276357,8 +276357,8 @@ CVE-2024-57687,0,0,3f591284140d188a0181694e131e95eee1c6490731d9aebb4db57934394e9 CVE-2024-5769,0,0,abfeb18ae91d2e4533cdbeb4bf7ad73d20beb760222f23226220c40a5c6d9f91,2025-01-09T11:15:16.127000 CVE-2024-57699,0,0,9810302493558cd2aa388d92a46812487319c834736468c7ce96e6ee43329a39,2025-02-06T16:15:41.170000 CVE-2024-5770,0,0,918380eecb24f860d41c083e6e9a778682d01ec1efa0eb8b0287a3dccfe91d0a,2024-11-21T09:48:18.730000 -CVE-2024-57703,0,1,821fb847a6deac1e43851cd3ab1eea58d6954af60eadb9972d53f3a457a3248d,2025-03-17T14:59:32.307000 -CVE-2024-57704,0,0,388d13d725b2d6b848e05df34aea7c5a2dcb3a5641239200e2639502ff2e9d9d,2025-02-03T21:15:14.990000 +CVE-2024-57703,0,0,821fb847a6deac1e43851cd3ab1eea58d6954af60eadb9972d53f3a457a3248d,2025-03-17T14:59:32.307000 +CVE-2024-57704,0,1,a9645cdb100870e11a8ca5752cec5d028eb030155daed4240595658dfba990b2,2025-03-17T15:04:57.907000 CVE-2024-57707,0,0,256285bb0e4c937fcd8fcd84fe295c9ba07342d1410e4f5a401c2306ce0e91b0,2025-02-10T17:15:18.353000 CVE-2024-5771,0,0,e471b000ba82873f846a0f0e75b0efdd4d37cb6fabf417a41ddc70ef105f4163,2024-11-21T09:48:18.863000 CVE-2024-57716,0,0,79da6b902a2967abf048782629438cae155ee0d179ea2083ddc6c325108a1865,2025-02-21T16:15:32.453000 @@ -276527,16 +276527,16 @@ CVE-2024-57950,0,0,4de3196a05a324d80ab81777eda50b90c773f35aad875db623dc77da16531 CVE-2024-57951,0,0,f76b42abdfb86704a9c0f0688028e52627d4292026dcbe9e66fcb6fdcc25a743,2025-02-14T15:57:18.047000 CVE-2024-57952,0,0,4a13802904b48d770e3732d2a4be26769b2ca0854368681c7bafc9fb5cc58fc2,2025-02-14T15:52:04.957000 CVE-2024-57953,0,0,f182f13d87183752d0eaa7f9c6732175734c06b50ef8a08a6e88ebd9abe97512,2025-03-07T20:45:49.407000 -CVE-2024-57954,0,1,a7ef4b0469e984683a30f03f95984e2f1288e42987cc747b2d35b83cc2864b86,2025-03-17T14:19:17.890000 -CVE-2024-57955,0,1,1bf7f71b38279ade6f3b182672b6fa74d27be1c1c3c76cf01445be894b6e60f6,2025-03-17T14:18:49.873000 -CVE-2024-57956,0,1,faad996c6db82b6b901accc44e86d8fe280795e93a1f7d00b19bc428e3841006,2025-03-17T14:18:18.810000 -CVE-2024-57957,0,1,7cc1a9a77f0bc13ef5463bf18e2c623ccfca90d5c275108a34e480d7df0c0c30,2025-03-17T14:17:44.493000 -CVE-2024-57958,0,1,1353dcf5c778a879da10458092ee949ddb7fac79c12ff083da06b4acf4d2a48c,2025-03-17T14:16:26.303000 -CVE-2024-57959,0,1,106244a81519cc49d0879edaa0bbcfa3f8ad1774b2b88d937b9fd7e7c7826cc7,2025-03-17T14:16:10.840000 +CVE-2024-57954,0,0,a7ef4b0469e984683a30f03f95984e2f1288e42987cc747b2d35b83cc2864b86,2025-03-17T14:19:17.890000 +CVE-2024-57955,0,0,1bf7f71b38279ade6f3b182672b6fa74d27be1c1c3c76cf01445be894b6e60f6,2025-03-17T14:18:49.873000 +CVE-2024-57956,0,0,faad996c6db82b6b901accc44e86d8fe280795e93a1f7d00b19bc428e3841006,2025-03-17T14:18:18.810000 +CVE-2024-57957,0,0,7cc1a9a77f0bc13ef5463bf18e2c623ccfca90d5c275108a34e480d7df0c0c30,2025-03-17T14:17:44.493000 +CVE-2024-57958,0,0,1353dcf5c778a879da10458092ee949ddb7fac79c12ff083da06b4acf4d2a48c,2025-03-17T14:16:26.303000 +CVE-2024-57959,0,0,106244a81519cc49d0879edaa0bbcfa3f8ad1774b2b88d937b9fd7e7c7826cc7,2025-03-17T14:16:10.840000 CVE-2024-5796,0,0,10c3848976491ca5eeb295d89b1679f80388276c56109509ef1777f493022afe,2024-11-21T09:48:20.910000 -CVE-2024-57960,0,1,e8e736eeac43712ad06e204872973050f7e9c2072a49515ea894d08c18e7aff1,2025-03-17T14:15:51.643000 -CVE-2024-57961,0,1,9600c1c208b20e57d8363f7b4c99dd6ed77f572e361b0bc6da948946da0d8c6e,2025-03-17T14:14:51.807000 -CVE-2024-57962,0,1,22faaa15dee4bc7870197028cc18077f725f96f6482dc9acb755ecae58efb1b8,2025-03-17T14:13:41.623000 +CVE-2024-57960,0,0,e8e736eeac43712ad06e204872973050f7e9c2072a49515ea894d08c18e7aff1,2025-03-17T14:15:51.643000 +CVE-2024-57961,0,0,9600c1c208b20e57d8363f7b4c99dd6ed77f572e361b0bc6da948946da0d8c6e,2025-03-17T14:14:51.807000 +CVE-2024-57962,0,0,22faaa15dee4bc7870197028cc18077f725f96f6482dc9acb755ecae58efb1b8,2025-03-17T14:13:41.623000 CVE-2024-57963,0,0,c0b9ad0e9492d86f09fc3b38c7a251544c5401df7db9cdf9fc66b72910a368d7,2025-02-18T07:15:08.713000 CVE-2024-57964,0,0,60e211b17010106ead87fc4560e1e4ffe78e9e25a18b2e6877df7f7f9b31937e,2025-02-18T07:15:08.920000 CVE-2024-57965,0,0,1ec783f88325ed02c1810413dbff411d8a59c49db780f7d0fa48c580055559d5,2025-01-29T10:15:08.113000 @@ -277112,7 +277112,7 @@ CVE-2024-6285,0,0,1fcb29e9b241d3d9823a549dedf67c28f15777f793819e6797d2c31a7c00b9 CVE-2024-6286,0,0,ffd2afbb00733d4c7fc744cedefad53f57376cf3d621db15d1c498d811afdf30,2024-11-21T09:49:21.390000 CVE-2024-6287,0,0,40f3c985baea6ec05334f3fce731768f0d81911c304f1a2e44209c982888aaa6,2024-11-21T09:49:21.517000 CVE-2024-6288,0,0,40bbc38b68a450631f0e9175185c8ad76d9776d4b142273208983180f4c09b3f,2024-11-21T09:49:21.653000 -CVE-2024-6289,0,0,e3b1da7f78c07c932415d923ac9d2fd6e2073e4f22fe5d996bf5052a37e49819,2024-11-21T09:49:21.773000 +CVE-2024-6289,0,1,320ce941c6e2296a32373b80e2225481febb1eb5ce32eb77f8cf3cd8c2340f26,2025-03-17T16:15:23.660000 CVE-2024-6290,0,0,ecbdc53f91b6c561a5db09710186acd2b3f3ef9b51205410ab3ba731edcf64a9,2024-12-26T16:26:22.763000 CVE-2024-6291,0,0,66d2b2d54c02e96dc13691c90aaf7f945837bdc6a98aacbc87b63c22a02825cb,2024-12-26T16:26:31.473000 CVE-2024-6292,0,0,1ac566fb41655f5c37f2bd78fc339ae1a5e7248a5c374fffe68269359e07bea7,2024-12-26T16:26:46.207000 @@ -278127,7 +278127,7 @@ CVE-2024-7417,0,0,d2d8fa74c3e6fa5146a2c7764aced25ecd5540a92b8f38454b495c7cc31c6b CVE-2024-7418,0,0,5b3ccdcae571dbfb594b5891ce579ddafc59ba401cc32bf9f76c3d50b89b1266,2024-10-04T16:01:06.077000 CVE-2024-7419,0,0,1ab952659bb568ed265b9f62597423d7fea12c0fb07688c8db2b0de727f66e03,2025-02-11T19:25:14.023000 CVE-2024-7420,0,0,f4b7ed863d66be1f0d470a1abe10e9290149c7db3b059dfea41249a35c4c210b,2024-09-13T14:45:43.513000 -CVE-2024-7421,0,0,404d03669e17b33230c466436e4bd8241e855e6647ca8418c58d45b13a0d46ac,2024-10-01T18:36:59.117000 +CVE-2024-7421,0,1,3bc4dac80fb84f34ca0c442587f81221b6ad0a2fd84a49a27e0b6041b7567b89,2025-03-17T15:15:42.580000 CVE-2024-7422,0,0,576285d4a0f7c9289949a5ef4d8ca897d044158a0a52df6fe96f5e7ff0457f17,2024-08-19T13:00:23.117000 CVE-2024-7423,0,0,105a565c50a80d879f822499a119792ebabd1e8ca39eafe050bb8b6966cc0116,2024-09-26T20:08:31.863000 CVE-2024-7424,0,0,5cbfa6b0fbeaf7b2fa3d2aa11121062b780a2e85e15e99c78af2009c741d4cce,2024-11-01T12:57:03.417000 @@ -279416,7 +279416,7 @@ CVE-2024-8905,0,0,9dd464b1263cb58eb9a04bacf3bec96ac31555806b4cfda8053df5a9abab71 CVE-2024-8906,0,0,33d6adfd5d22361ace69c19a03921b3eee65b888570501a28793e65ff627085e,2024-09-23T17:38:53.613000 CVE-2024-8907,0,0,51c2686e57db6be1a13996b2715ca4c00712b0dfaff67ec4c63726bf92597254,2024-09-23T18:23:57.697000 CVE-2024-8908,0,0,5817f53ddb99ab4a81fefd746445a2c702eaf4a55d3e4f8367bc04682257df1a,2024-09-23T17:59:14.137000 -CVE-2024-8909,0,0,fb8c7cc103ad0a4020bec1abca775241831a1e52b8f464def3241421ff1aa23a,2024-09-23T17:51:11.790000 +CVE-2024-8909,0,1,14d545b0acbadd1a8ac01aec679492b77760ec9b2d9d6e79349069ac62beb0db,2025-03-17T16:15:23.870000 CVE-2024-8910,0,0,b23db5016d915783bf9156097d73048cfcbe9132f4af76d9048ab9b65d0f274b,2024-10-03T17:34:27.913000 CVE-2024-8911,0,0,7b193f113dcabb72190dfa54c4c190e54ec04d545082a5b8916f8e19463ea02b,2025-02-20T15:30:18.643000 CVE-2024-8912,0,0,df126ae299d5cc2caa7160c169ca52c794fe7171d7327a4e34c25ab6fe5c9546,2024-10-15T12:57:46.880000 @@ -279535,7 +279535,7 @@ CVE-2024-9049,0,0,46f59db09c33626f1d69749abe044e964ccad29cd9d220bcda7c466f92187f CVE-2024-9050,0,0,3010fc5c627c8c1972d6f17910d5cdccb5923b375100e48adbc3d5a72e9ff9bc,2024-12-18T17:15:15.420000 CVE-2024-9051,0,0,c5391680d54c46a0bbf9a1fc0deb0ba09610fc9b3f0482409fd6a0ca17d3cbe1,2024-10-15T12:58:51.050000 CVE-2024-9054,0,0,fd13ee9fa07c3846f703232928ae0e36919a799f27cd3ce227e9264dd82075f9,2024-10-17T15:19:32.803000 -CVE-2024-9055,1,1,025496d949fb92185a5dc60bc9725a4ff06959ae73e6536fd6cdac195c5786ad,2025-03-17T14:15:19.820000 +CVE-2024-9055,0,0,025496d949fb92185a5dc60bc9725a4ff06959ae73e6536fd6cdac195c5786ad,2025-03-17T14:15:19.820000 CVE-2024-9057,0,0,da1a5d02a395b3aaf5d692a1b568952646bd6e0d0489aae5adf09df9f0d061b4,2024-10-15T13:58:19.960000 CVE-2024-9058,0,0,957d898d6b987a3e8d6376fcb6dbb80e952b4863252def7195bf52513150b6df,2025-01-29T15:36:12.003000 CVE-2024-9059,0,0,2de7cdef7dd504aa7a2c0a537071b903a9a4a3ccef9184b58357a333d4e0fec7,2024-11-19T15:53:56.680000 @@ -280572,7 +280572,7 @@ CVE-2025-0435,0,0,604058ef793e33435759746d46c23b90cc51452de4822b6472440608e3ab59 CVE-2025-0436,0,0,72789f2cd8147d5a86876c7b0b79e40e25dcd2c9396b81691e6fd199d1206765,2025-02-18T22:15:16.627000 CVE-2025-0437,0,0,13fe255170db1ac9d25ee4d2027f7e4790c577c7c77e5e9506d3559bc1d4114a,2025-02-03T19:15:13.967000 CVE-2025-0438,0,0,8c7333aeb87f87a4f7e9edbefc8fc5ab12029c07bdaef09c154718d38cd9690f,2025-02-18T22:15:16.743000 -CVE-2025-0439,0,0,64bc07c03f4f6f9503b5553e6b40c47065a19c9d3a5b5230916fa5ef4abac11f,2025-02-18T22:15:16.870000 +CVE-2025-0439,0,1,101658db461148311c4db52613ef0d8a033b47ac11db7b69a0cae87e2b2f57c1,2025-03-17T16:15:24.267000 CVE-2025-0440,0,0,0111d0059d314ca24ec0c13e047ade75b4312adc756687d6a0945eb3b9980851,2025-02-18T22:15:16.993000 CVE-2025-0441,0,0,57474fc72228f8141c82ccd8d5112a3f8c49a342741a3515cddc85e982f09d06,2025-02-18T22:15:17.087000 CVE-2025-0442,0,0,b67a5ab0a614c9dcc349e6c0e7630de1fb2af7af324e655577d77f7fa5f9a38f,2025-03-14T18:15:31.303000 @@ -280700,12 +280700,12 @@ CVE-2025-0590,0,0,d81cd8b36faa71d41ba820106853d8f1ea4eee3f00df9dab8137d82c49b237 CVE-2025-0591,0,0,31743e528b9642b20d256fb46c14cc7ce872bd582fcdb63a43f5e161426dc8af,2025-02-17T00:15:08.987000 CVE-2025-0592,0,0,92924626baecbab996d0e97311af8c1852928a73cb5e120c4713cb77cb4e663d,2025-02-14T21:15:16.543000 CVE-2025-0593,0,0,f384bb5183fd52ec3bc21aa2809ce1a4d509fdefca6b18add8a3ba9e9b530a58,2025-02-14T21:15:16.680000 -CVE-2025-0595,1,1,0a527cf89a2d8a34341d0edaffb6116046b2a822b1b9cddbeab03e5625340285,2025-03-17T14:15:20 -CVE-2025-0596,1,1,b8d83175e303320b766aa836918ed1f207f3106773b846ece7fc40af97681397,2025-03-17T14:15:20.143000 -CVE-2025-0598,1,1,89d01651963c6b6000a194b3d1a64f4ce797bb0cb75487bc48424009db9d578e,2025-03-17T14:15:20.270000 -CVE-2025-0599,1,1,60f5f2ff1be4e8e71ab8dcb38c35cb0f245f81627aa3eacd7289189f490d5de4,2025-03-17T14:15:20.403000 -CVE-2025-0600,1,1,444b9f261bb1153bd8b3e667b223cf7eb355c0324bf0de9124b420d156600060,2025-03-17T14:15:20.527000 -CVE-2025-0601,1,1,ab0d13bb44af033b0b5da1d9986bc31eea63f9e958eae7ed94696fd9d7dfe76f,2025-03-17T14:15:20.650000 +CVE-2025-0595,0,0,0a527cf89a2d8a34341d0edaffb6116046b2a822b1b9cddbeab03e5625340285,2025-03-17T14:15:20 +CVE-2025-0596,0,0,b8d83175e303320b766aa836918ed1f207f3106773b846ece7fc40af97681397,2025-03-17T14:15:20.143000 +CVE-2025-0598,0,0,89d01651963c6b6000a194b3d1a64f4ce797bb0cb75487bc48424009db9d578e,2025-03-17T14:15:20.270000 +CVE-2025-0599,0,0,60f5f2ff1be4e8e71ab8dcb38c35cb0f245f81627aa3eacd7289189f490d5de4,2025-03-17T14:15:20.403000 +CVE-2025-0600,0,0,444b9f261bb1153bd8b3e667b223cf7eb355c0324bf0de9124b420d156600060,2025-03-17T14:15:20.527000 +CVE-2025-0601,0,0,ab0d13bb44af033b0b5da1d9986bc31eea63f9e958eae7ed94696fd9d7dfe76f,2025-03-17T14:15:20.650000 CVE-2025-0604,0,0,11b5fa64e0c44fc853249fe566d1ae9520d7be28da05402f93563e9d23c37605,2025-03-10T19:15:39.487000 CVE-2025-0611,0,0,d5c9360fc3080a3bf40a56d9e6161f43213715b53cd2c1f914a2626e9581bcd4,2025-02-06T22:15:40.053000 CVE-2025-0612,0,0,7ea4d4aa25f622741c89c8921e9bef8da99d00f4284523c951843203c8182c72,2025-02-04T19:15:32.720000 @@ -280840,13 +280840,13 @@ CVE-2025-0821,0,0,276d38f36e1718392d91943f87a21d4117bd30970ca15dadffff44ef97d51e CVE-2025-0822,0,0,4c844a6713ce2631895193eac241699c6c3839eb1c8dbea359488af5de55887f,2025-02-24T12:36:46.670000 CVE-2025-0823,0,0,b17020edbeb4f15871634c93dd95e17203bfc02555cfe3346399d6264293faeb,2025-02-28T03:15:10.510000 CVE-2025-0825,0,0,a0334191040ddd84cf58e374702797f73c6f21c21dcc064c3fd05efc8149278f,2025-02-04T15:15:19.420000 -CVE-2025-0826,1,1,a8e2bc6fc263b4330cd91b54fa61bcc55d257b99eba1125ceb578915fd46be5e,2025-03-17T14:15:20.780000 -CVE-2025-0827,1,1,28e6091e4ccf8fc74977472dde7f380e3290b3ec4774444d361c6c038e6cd1b3,2025-03-17T14:15:20.913000 -CVE-2025-0828,1,1,d050ffe3236f9410915630b1dde710a184a7aa9e96fbddd9272a7edd167baef5,2025-03-17T14:15:21.037000 -CVE-2025-0829,1,1,7f3609bbcb4508d3075529481632e4096f0ada28e87318b2202e0360d0ba8e46,2025-03-17T14:15:21.170000 -CVE-2025-0830,1,1,674352a2fbb21a95584631a26c61bfe6b14e46ce3f1dc44404c5c0833121ff74,2025-03-17T14:15:21.317000 -CVE-2025-0832,1,1,a40e1dfbaa7c29ca8eb483f5c60f0853dcae321cf9f26233ae897ec2cd957ad2,2025-03-17T14:15:21.500000 -CVE-2025-0833,1,1,10824428e2bf44e29a1bad37f38740d198a1cdbb5424050033302256c16cc351,2025-03-17T14:15:21.693000 +CVE-2025-0826,0,0,a8e2bc6fc263b4330cd91b54fa61bcc55d257b99eba1125ceb578915fd46be5e,2025-03-17T14:15:20.780000 +CVE-2025-0827,0,0,28e6091e4ccf8fc74977472dde7f380e3290b3ec4774444d361c6c038e6cd1b3,2025-03-17T14:15:20.913000 +CVE-2025-0828,0,0,d050ffe3236f9410915630b1dde710a184a7aa9e96fbddd9272a7edd167baef5,2025-03-17T14:15:21.037000 +CVE-2025-0829,0,0,7f3609bbcb4508d3075529481632e4096f0ada28e87318b2202e0360d0ba8e46,2025-03-17T14:15:21.170000 +CVE-2025-0830,0,0,674352a2fbb21a95584631a26c61bfe6b14e46ce3f1dc44404c5c0833121ff74,2025-03-17T14:15:21.317000 +CVE-2025-0832,0,0,a40e1dfbaa7c29ca8eb483f5c60f0853dcae321cf9f26233ae897ec2cd957ad2,2025-03-17T14:15:21.500000 +CVE-2025-0833,0,0,10824428e2bf44e29a1bad37f38740d198a1cdbb5424050033302256c16cc351,2025-03-17T14:15:21.693000 CVE-2025-0834,0,0,239a6f08c2db88ce57ab64c699932d200eff33712703b8a8f00d02b01207348f,2025-01-30T09:15:09.703000 CVE-2025-0837,0,0,edb903a525c34e5db3f70de24ac0ad9bb2158867f6a7f92ca61239987715eef7,2025-02-24T17:08:29.033000 CVE-2025-0838,0,0,5a9fc4e1768f097f2fc50c995427721cfd5a7a3b77299bdbe2955b9299abd536,2025-02-21T15:15:11.890000 @@ -281208,6 +281208,7 @@ CVE-2025-1390,0,0,4fc86a10da8dd3f0a18ea2e30ae82e3cb10771daa7275bed87235a02cfa82a CVE-2025-1391,0,0,92923563d5f6ebe7489c1cf297a79c50e1a9d080a96d841d79358c408c639ed2,2025-03-10T19:15:39.860000 CVE-2025-1392,0,0,f08bbb9b69f485fd54fc78272460b890a55805f93dc93ed202a1f5ce9ea26d62,2025-02-17T16:15:16.120000 CVE-2025-1393,0,0,1a18b9780d45efd3906fabb9eb91bce6e4d37c3f3f1f9128e55d743057ba1663,2025-03-05T08:15:35.107000 +CVE-2025-1398,1,1,224142ca8b36a44d4c486a554dae2a346aa95532271e41b032ef03da744e1c0c,2025-03-17T15:15:43.243000 CVE-2025-1401,0,0,f9684d4d64375cb57d02dc9e61b23893bfe6d4b5b0bfb5341f3fb1836411b2e8,2025-03-14T17:15:50.433000 CVE-2025-1402,0,0,c23c451cfa1d570fb16b3d38ae224aa085b42cdb084d4b1dbd67b0732fd42aba,2025-02-25T04:04:59.860000 CVE-2025-1403,0,0,d98767ffbbabf7b703d6464c4760704cf18c9952a200d902dfdc98a149c5818d,2025-02-21T18:15:20.550000 @@ -281331,9 +281332,9 @@ CVE-2025-1615,0,0,a11d392e12decb5548c3eb2ed4ca97c0157f25e2a5df4668c1bbfe0a77153c CVE-2025-1616,0,0,b5e814afd5c375b17471788a2083e8c576ed43b856662c9b1ac9a2c9bf27580b,2025-02-28T17:46:00.263000 CVE-2025-1617,0,0,5699c11babf41c6523a7b468d5f93f623e40fad3886f2c2564d3fbf01bfd5a5a,2025-02-24T04:15:09.277000 CVE-2025-1618,0,0,26805ff186a34eff816cd1df89880ebc77e7548d77ce085b3162d114680f02ff,2025-03-03T07:15:34.730000 -CVE-2025-1619,0,0,4bc0ea5cddfe776eb4d9ce15fb8797de4223b059722f01e9a5c07dbfe9d66e97,2025-03-16T06:15:12.610000 -CVE-2025-1620,0,0,62e5c6780b300db6765812d1c7866486a0b315cd0380beefe96395f46140f5c3,2025-03-16T06:15:12.730000 -CVE-2025-1621,0,0,ca3760c9e422052958856d8bdd03cfcb020a59717f1e31eceff2a30a4604e68e,2025-03-16T06:15:12.857000 +CVE-2025-1619,0,1,f366b95984c19e18bdba7e1352e290fefb1c13069d7338464fd7bd43829f6843,2025-03-17T16:15:24.543000 +CVE-2025-1620,0,1,3a2629b3509730e215bc43e14ae1f78db6501443e8e1f5cfef680043e166af60,2025-03-17T16:15:24.710000 +CVE-2025-1621,0,1,53bd4eec6307b47ab1be5d1326aa38001818468eb455e907e7cb428b2e93c04d,2025-03-17T16:15:24.877000 CVE-2025-1622,0,0,48d6cd9d3603d12f189e471a95b456ac670ba657a60174a06c2bb00eb3ad650d,2025-03-16T06:15:12.977000 CVE-2025-1623,0,0,0dc1e432a204441b6f1520af11ef2914f0ace27a1683eaeeca8e417c0235e897,2025-03-16T06:15:13.093000 CVE-2025-1624,0,0,785447ee8a14c8903232f69663bd1e03e621dd18a2d0c32a36b6e93de76c7805,2025-03-16T06:15:13.210000 @@ -281414,6 +281415,7 @@ CVE-2025-1767,0,0,2d7a67a49e2d8224d71f3f81db0cee88468897d8d69262d33481730c6124ca CVE-2025-1768,0,0,21c4d8708441d636d3d85a241f0a7821ff945f56838f66ee7adb3147ed9da671,2025-03-07T11:15:15.653000 CVE-2025-1771,0,0,c171ed55fed0a4a64976e6e8eeb1698997415eae3c2cf608015436b6fb242c77,2025-03-15T05:15:47.253000 CVE-2025-1773,0,0,795daaa3f258262b445a3a99a79426a4cfa2d8aa55ca3c162cbe1a93dbd5c998,2025-03-15T05:15:47.403000 +CVE-2025-1774,1,1,8e0367ed8bb2061d3c8c88202d36163a48bcaa3789cd28f90c30f0871f7acaaa,2025-03-17T15:15:43.523000 CVE-2025-1776,0,0,9f5910c7138c13ec1de71b228a6c2b4d183ead70b893aab7547c66452e55fc54,2025-02-28T14:15:35.943000 CVE-2025-1780,0,0,3f45bedc6155c2b8b2fa77d1259dea132c1de7996dc227477ece460ea93a3593,2025-03-01T04:15:09.713000 CVE-2025-1783,0,0,e48c138c40f2d914a65aee6d041fe7a65d94152e6e5d81125a2808ab85acce50,2025-03-08T10:15:11.647000 @@ -281697,7 +281699,7 @@ CVE-2025-20633,0,0,38e2a030fd0d7f547703f3781e9e02df03269c9ee8f44017e895217aa066b CVE-2025-20634,0,0,b403d84e0221b3268f60e8ecac060161651ab801a15d09c6d731a484c65ed499,2025-02-18T19:15:24.690000 CVE-2025-20635,0,0,8539c0947a7b8ea603fd19e11d259a5fccf8cdeabef5ef4676784c0a0d03499e,2025-03-13T20:15:25.597000 CVE-2025-20636,0,0,53b7c37fe38dde7172ef3ef0f4e80e1b55d45c79cbcdafad69f9ad23a7de5c5b,2025-02-18T19:15:24.960000 -CVE-2025-20637,0,0,c4c64b7001bd8fc1a5334ed6ff29601eebe878b94ae3c7ef6deb4d59a01f4b6c,2025-02-18T19:15:25.103000 +CVE-2025-20637,0,1,c98f77253202c98cc20372cd8c54d3277c2b4473b3f20cbc97ddd00be7dce7b1,2025-03-17T15:15:43.697000 CVE-2025-20638,0,0,08f8240b8781ba529172281ed593ac6a74928a95932c1e6e64c0bd0033c3a922,2025-02-03T19:40:23.927000 CVE-2025-20639,0,0,17768a082d000d8edbb8d765dc2ec03f9c211008cd739454854e21355c649809,2025-02-04T15:24:00.723000 CVE-2025-2064,0,0,5d8390ec43d5e2b2e1f38022b7f4c2e49b761d785360a1688258f65a48e13b77,2025-03-07T04:15:10.247000 @@ -283137,7 +283139,7 @@ CVE-2025-23242,0,0,9b20bedcf14352ca9df0a5ecc34f6004c4e1503c511865ff1afa1d3c82eca CVE-2025-23243,0,0,d341dee54207e76092fa73545c292abf7fbfda4eb6567d84dd5238ba2f02d191,2025-03-11T20:15:16.463000 CVE-2025-2325,0,0,3c6b219229dc76a33d78d2ccb8fd1f767d78355c555f30961ca2b7b219af14fc,2025-03-15T07:15:35.107000 CVE-2025-2333,0,0,600470717f73ae989a4e33407be9c331e6223c6ec027e4a7c73886df7950cb72,2025-03-15T12:15:12.610000 -CVE-2025-2334,0,0,87470ad04cc48e0239ddeaa8f1cc6a27bd4aa85cbe25e80f39c75b6fa5d9816e,2025-03-15T23:15:36.980000 +CVE-2025-2334,0,1,af1cfc1613b38618f43c910beb17815194cac4ddb461c16fb47f2aba7d734581,2025-03-17T16:15:27.017000 CVE-2025-2335,0,0,706aa2907d4bd291d4dd781e9005e6e8f3456955d568c8d3d9b369e28c0e73aa,2025-03-16T03:15:37.907000 CVE-2025-23359,0,0,078a2b254b9542e7cfbdc0b2539045b6c597acb96680d65380627cec160e1602,2025-02-12T01:15:09.230000 CVE-2025-23360,0,0,44ec4858c221e4e9b3ef85a446da660e97979bf1d4ef5b7d7efaafadb38d1c40,2025-03-11T20:15:16.633000 @@ -283147,12 +283149,12 @@ CVE-2025-23366,0,0,19d3d492f06020aadbd27d64e622d5ed1c347260739b5074a05d263b32a74 CVE-2025-23367,0,0,7754a5b5a7ef7b20fc4ec39ada85296b1a92f1ca2476a6564c884bf68763656c,2025-01-31T21:15:13.613000 CVE-2025-23368,0,0,9c664fc0f9e7b340d6131cc859aefb9e94f28c0c73f7486f5208547e13f4025a,2025-03-04T16:15:39.270000 CVE-2025-23369,0,0,74f04427c8261f575e3b46a10e2c572c85dddb2e090b01cedc0f322610f8f68b,2025-02-05T19:15:45.747000 -CVE-2025-2337,0,0,1bea57575dcbf4d8c20ecfdcc326ac9e1955617776c3e47359ed64a009bcb1d4,2025-03-16T10:15:25.793000 +CVE-2025-2337,0,1,7d9e5607ad2b02dfc242a3305f849e66226e5392d822e3a7a605b0e9bacb542e,2025-03-17T15:15:44.983000 CVE-2025-23374,0,0,dc7fc0938dfddbb9f9d96945d0cf484d16ace6397f0b6d455113dea4502470b2,2025-02-07T20:09:28.717000 -CVE-2025-2338,0,0,e1817d3bd4f3a2886eb379672293e26d61da3216de9706af1fbe1866b37f5783,2025-03-16T13:15:37.827000 +CVE-2025-2338,0,1,d6a145ee9d99f0b331d4e327057f954207c4362f81df3d1dbf4d76a1b480aa57,2025-03-17T15:15:45.113000 CVE-2025-23384,0,0,d7685224b7a10743fe5eae6a1ebefcafcac773ad88bd00cac8b6407ed3adf454,2025-03-11T10:15:16.330000 CVE-2025-23385,0,0,44f68c3210fdb2f588e2b733b3276d4f924d74ac5df4660c1e28e1d2bd89eca2,2025-01-28T16:15:41.377000 -CVE-2025-2339,0,0,afa9f41c145fa401320379508d9b5b5e05539d020c2ea1635094e22e6dc0961a,2025-03-16T13:15:38.003000 +CVE-2025-2339,0,1,fb243958e2daa877ca1a322ef09207ff301ba4f92634dddb833183fd13861e60,2025-03-17T15:15:45.253000 CVE-2025-23396,0,0,db4e35f65814d6895af1ea2102cd85328d5b692a5d5376b0f0f76fda3c3d1fa0,2025-03-11T10:15:16.670000 CVE-2025-23397,0,0,b39331b70d2d90745cf1ffdc79eae13a67bdd2a5914d5254d36092c6bef82b6d,2025-03-11T10:15:16.840000 CVE-2025-23398,0,0,06f6f7336d9ea782ecf8b7d22ce4427b70f63b9b90fe1843698322a5007cf4ed,2025-03-11T10:15:17.003000 @@ -283531,7 +283533,7 @@ CVE-2025-23766,0,0,6f8788466ea1e979883e67d78e53062fd0f4dadf013cf2e27f44d7bfd409f CVE-2025-23767,0,0,76b955d01b413ad0d12074ad466dc5f46f00daa50de12aab124eaa31dd6c7055,2025-01-16T20:15:46.967000 CVE-2025-23768,0,0,c920b5460eede4e28ad5a6bab1c476ba3bdb6f23c66470e8c98ff4291178165c,2025-01-22T15:15:23.040000 CVE-2025-23769,0,0,53257e72a10317cafa19e00a8c5a5b99ad2fd2ea1f55ca7c7353c473a7d37d32,2025-01-22T15:15:23.177000 -CVE-2025-2377,1,1,d1095c652d4809c622552c0fa198d3a0dd4671a38391a067fda588b3ef7b0942,2025-03-17T13:15:38.937000 +CVE-2025-2377,0,0,d1095c652d4809c622552c0fa198d3a0dd4671a38391a067fda588b3ef7b0942,2025-03-17T13:15:38.937000 CVE-2025-23770,0,0,b107f9a81729d03ca29a129f8fa439c6c2e86696ac80ab6dc074436a78cb1d5b,2025-01-22T15:15:23.303000 CVE-2025-23771,0,0,65f02e079325c59eeccdf702e1503351ea70607dbcc194f06ae27108336d1453,2025-02-14T13:15:46.727000 CVE-2025-23772,0,0,982ec2219b56005812368f626d4b56d161e9940f6a430166e5a95ac8a677bf4d,2025-01-16T21:15:18.860000 @@ -283541,7 +283543,7 @@ CVE-2025-23776,0,0,37de3b2b14e271fcfbb20da8692ccd78a75aacda39d2827a4094c19b2c205 CVE-2025-23777,0,0,4a326f48ab7f72fda28a2029d2e8fcff1eb6ecc0b79f9b4a29e6b77da3703898,2025-01-16T21:15:19.323000 CVE-2025-23778,0,0,ec507f7d7972e2e40560045a380302593c7d0acc005e784a6facac59ad9068bf,2025-01-16T21:15:19.483000 CVE-2025-23779,0,0,529f2e7055a40628327b34353ab55d9e33e7bfdf9dee62cd6c791680554374f9,2025-01-16T21:15:19.640000 -CVE-2025-2378,1,1,599332ed19bd1b66058c11fc878eec767732b983cef928abfa25f5b60bb12a48,2025-03-17T14:15:23.700000 +CVE-2025-2378,0,0,599332ed19bd1b66058c11fc878eec767732b983cef928abfa25f5b60bb12a48,2025-03-17T14:15:23.700000 CVE-2025-23780,0,0,8e8a5a259b47149e41183320f4a6badd26f64cf46f39776b5541a103424e4292,2025-01-16T21:15:19.800000 CVE-2025-23781,0,0,cd0c15df451a42164f1d2898bc0c8ae13644ba06ec604b656c9b563ada24e3a5,2025-01-22T15:15:23.573000 CVE-2025-23783,0,0,87e60e041b1b360cdc15ef5034f69c2a2df8e80bf19196341df29f91771cdf1c,2025-01-16T20:15:47.100000 @@ -283551,7 +283553,7 @@ CVE-2025-23786,0,0,c84df1490b3ddc892e4b36f83bf17091d1849c69b6f20c3dcd07e4b962907 CVE-2025-23787,0,0,98207203d832413e4931bad5e77d78a9df408f5e5b14f95d98c2482c81408ba4,2025-02-14T13:15:47.003000 CVE-2025-23788,0,0,4bb3b0767645208543536cf247d0bb9ab69d19e50177026883ca5d12def5afa1,2025-02-14T13:15:47.143000 CVE-2025-23789,0,0,e8d957926874b9276fcdfea53856a4d2eb6c6dbab67e8a9de7a4446dcd9c77d1,2025-02-14T13:15:47.280000 -CVE-2025-2379,1,1,6f6b89f42e704f973a1e648267c394ab8ee3f48564ad71904fbcb37fa830230e,2025-03-17T14:15:23.907000 +CVE-2025-2379,0,0,6f6b89f42e704f973a1e648267c394ab8ee3f48564ad71904fbcb37fa830230e,2025-03-17T14:15:23.907000 CVE-2025-23790,0,0,bb5edb8d23e9d9179798a375cc1c933f749aaaa272a5a621aff2538407ab31c0,2025-02-14T13:15:47.417000 CVE-2025-23791,0,0,0a4e14fe20d5edd4b851b0fffb1f61f6e7f8fd7d1002fde34a1dd39504f5e9f6,2025-01-16T21:15:20.113000 CVE-2025-23792,0,0,3a1dea12e76b42cb372190ab685cecea7a553c8f2a71bf9dcb5f8fe000fca6bf,2025-01-27T14:15:28.510000 @@ -283562,7 +283564,7 @@ CVE-2025-23796,0,0,0a3fabd756343760fb9fd7ea1faf1fd87c92ac1431e709162d1ddbc10e973 CVE-2025-23797,0,0,082b5b5ea2fb63d11c655fbf0b483df0d8fb7cfd44eb169c32045a13b0f3b570,2025-01-16T21:15:20.877000 CVE-2025-23798,0,0,707c49293c33d181ff5a97e7158413a43279428c770e750f95afaf56a8f385d6,2025-02-12T16:15:45.630000 CVE-2025-23799,0,0,11bdf56dd0c8d60a8e7ce20b6fe107d6d81aa05ec15436d7d55867128885bddf,2025-02-03T15:15:22.843000 -CVE-2025-2380,1,1,806be2470098449b8327bd3cdf7251d7bd105a4a596edd03dcee4f832ab2a2f8,2025-03-17T14:15:24.117000 +CVE-2025-2380,0,0,806be2470098449b8327bd3cdf7251d7bd105a4a596edd03dcee4f832ab2a2f8,2025-03-17T14:15:24.117000 CVE-2025-23800,0,0,878d719ae1f903e32e2d6add2209886c141de252f651652314e69251a4a34fb9,2025-01-16T21:15:21.040000 CVE-2025-23801,0,0,f35c3b1c7ca35d2725621e19aa2aa2edc970115b0f68db658f0c8dc9dcb2d2ec,2025-01-16T21:15:21.190000 CVE-2025-23802,0,0,c4f195bb87a3033611183b9369b140030963b1f0853d1ac42f2e5edb0b688d0d,2025-01-16T21:15:21.350000 @@ -283573,6 +283575,7 @@ CVE-2025-23806,0,0,04602200442ddf4754a13847a9e20ea1f54a9f3fea528ec5ca43235130901 CVE-2025-23807,0,0,c8793edd44edeaeef736793be45847bc259f064ecf1054a483762c7668919c71,2025-01-16T21:15:21.800000 CVE-2025-23808,0,0,bc9ac4b7d3fac9a3e82e2e48ff9c8301d6a5068db6fc11c17fa56f429c0d18b5,2025-01-16T21:15:21.957000 CVE-2025-23809,0,0,e4d8ab24925754ce1ceb1aac20374346938ff78ccd5ebe9cba6a3cb39ad5912a,2025-01-22T16:15:31.437000 +CVE-2025-2381,1,1,c64c8ec322a8b2b3dba11cb56647f4b377c6f1e097558af47247c3c11699f32a,2025-03-17T15:15:46.390000 CVE-2025-23810,0,0,3d886969fb81b13e95f7725e8aa5117b9c91c9b06310f0521237e64ca9eef400,2025-01-16T21:15:22.107000 CVE-2025-23811,0,0,aeb0bca809888e8a2f8b0c81b6ebd8caf62a27a7e7c72a06995d8ae53ef2be67,2025-01-22T15:15:24.297000 CVE-2025-23812,0,0,797de7752c23e203568847ac02c79ce570616871d6f8a90a6d5cabd8571ade96,2025-01-22T15:15:24.437000 @@ -283583,6 +283586,7 @@ CVE-2025-23816,0,0,99e7a2982284cfe1c4b342546ab2ac7819e99932258e5aada2c1a28f9b0c5 CVE-2025-23817,0,0,64c5a2eba1c8283bdb068da6e45257681009c02912f79237808c3a614cc30aa9,2025-01-16T21:15:22.560000 CVE-2025-23818,0,0,74773d3155d8075e91447c90276c07a950f673cde3ae565f4ad7ab13f70d65cd,2025-01-16T21:15:22.693000 CVE-2025-23819,0,0,46d5181eb3da816fd3300bc22b4c25ad3e31aae255c2f67395fbaae47170cf4d,2025-02-03T15:15:23.020000 +CVE-2025-2382,1,1,37e7d97b026dca6177d493060ca57fd8852f144b967d5351eff60ad681bd916c,2025-03-17T15:15:46.590000 CVE-2025-23820,0,0,13e803342af77943212968f5d91f0564dab8d8c497735895117111ee94a876b9,2025-01-16T21:15:22.847000 CVE-2025-23821,0,0,e706bdd1d30ae9432cea30d451fa9863d9a0eeb73467a53ec0906ddcd878d85b,2025-01-16T21:15:22.997000 CVE-2025-23822,0,0,2510d8d95e7b13b2165f625cbf5a81f81068c2a5d3401eafab3e85bbadb8578f,2025-01-16T21:15:23.143000 @@ -283593,6 +283597,7 @@ CVE-2025-23826,0,0,31cc4f889fe54c4f547abb60cc2ead671f3ef1f0e15ebb2f69c4ac4c9eb9f CVE-2025-23827,0,0,2ba64e27ab682dd5ec54367bbedbdcbbff79cebacb1bc86ea6bb734008f4861b,2025-01-16T21:15:23.873000 CVE-2025-23828,0,0,5cbd4d2f58506793d3df94a0bc780e8d14ab5e4da9eff853b88189304863a098,2025-01-16T21:15:24.047000 CVE-2025-23829,0,0,a557fbf33ff63349e4bc09921080681d85de7efbc7ffd844ce82b08dc1670d31,2025-03-03T14:15:47.417000 +CVE-2025-2383,1,1,4b151a2767a585fb6f9ed3bf6dec8d6c194858f521e76bcdfa6e39acee0ee3ea,2025-03-17T16:15:27.600000 CVE-2025-23830,0,0,b29c1dbb724e30118134483053c6856e5726b7a86f2f6d719fdcfca154e0a8a7,2025-01-16T21:15:24.213000 CVE-2025-23831,0,0,5197c9bfacc7e149482a79695ac12aead57f227753093688448b8bbc9868aa27,2025-01-16T21:15:24.360000 CVE-2025-23832,0,0,2679ff496b3a637ccd709dc676c5ecac70472f75fa8b558e60904410452695ff,2025-01-16T21:15:24.510000 @@ -283603,6 +283608,7 @@ CVE-2025-23836,0,0,5c76aa20fa64580f07d9530831e0cb5c7e88e1287b55c63d0300b02146b3c CVE-2025-23837,0,0,371373d70784fb5e2285584d435fa34d3363a28bafc09c0ab1690ff32190677d,2025-01-24T11:15:11.240000 CVE-2025-23838,0,0,4752ed20e3dc714416037d00b281cddc275d8df64a4c888dd8f3b3d43e89086b,2025-01-24T11:15:11.390000 CVE-2025-23839,0,0,c711cdfd3a6cd8df3981e46ebebb623db7f4f50ebcbba001c1ca48594578b44f,2025-01-24T11:15:11.523000 +CVE-2025-2384,1,1,1b553039d5eb8861ada3d543678f98a3cde3206d037a7dc0f50ea4bba9e6c4f8,2025-03-17T16:15:27.807000 CVE-2025-23840,0,0,f0f7548a18e4cfedb3688e9fbc7414acc68ef02d31e6af775d6a7349c3921d9c,2025-02-17T12:15:27.973000 CVE-2025-23841,0,0,c097c459c2277c131514a3ea078b91eba98a25a334eaa639de34719734a5222a,2025-01-16T21:15:24.793000 CVE-2025-23842,0,0,2b0139d7daa7e9dee90c237d483621e8535d39bd8efb9a3ce143d2d5a6b0d36f,2025-01-16T21:15:24.940000 @@ -283743,7 +283749,7 @@ CVE-2025-23996,0,0,044a631ccc7b953428bed6ca4f1e78634642ba7fb893e1284d5301e8ce6e2 CVE-2025-23997,0,0,77e65675aa34b148df76ab43b9568b71cc7208d39621afbe6f65c277717cb0b4,2025-01-21T14:15:13.230000 CVE-2025-23998,0,0,4ced4b8f68a6d09d5a1c825ec6107a84dbbb418c96e80844463996fce823e3ed,2025-01-21T14:15:13.413000 CVE-2025-24001,0,0,2c753840ec158b2e8c5040a7ed2631e45b8667250a806707291f782ebc7cf4aa,2025-01-21T14:15:13.600000 -CVE-2025-2401,1,1,1d86b07f389a978b2d2e97af1c2fdbb18bc6083b14034c948680ca42095dca9c,2025-03-17T13:15:39.803000 +CVE-2025-2401,0,0,1d86b07f389a978b2d2e97af1c2fdbb18bc6083b14034c948680ca42095dca9c,2025-03-17T13:15:39.803000 CVE-2025-24010,0,0,755be8be1475b71408bd0286ec94084c98023c6a02427820a8766e3be39154b8,2025-01-20T16:15:28.730000 CVE-2025-24011,0,0,4997002c63d87a94e8865776add6314e721049c559bd5f674a539776486b7a16,2025-02-20T16:44:29.017000 CVE-2025-24012,0,0,d7756088832c18500532400fd59d99bc70c3afd7fc4835be1603f2f4ad48aacf,2025-02-20T16:45:15.377000 @@ -283829,7 +283835,7 @@ CVE-2025-24121,0,0,3147f918c1f3d7a66c464fe94f2778628efbf774801d0ad4400d3a98a4740 CVE-2025-24122,0,0,63629b839b402edeef408de5ba24f2cb0ef35ef076785a337d7d7055ccc840b7,2025-03-04T15:16:52.190000 CVE-2025-24123,0,0,4e49fa5cee2fdaa62f898b9fbbf4556effb9c8954fdd9c8a5b39828959525d73,2025-03-04T15:17:41.803000 CVE-2025-24124,0,0,162b63d0e3f74d8684529de2b3c84fa59b8bf0775ede92dbde308c3f3a40fdef,2025-03-04T15:18:09.183000 -CVE-2025-24126,0,0,9d591a5f7dd7ab4b12dc1b481c9ad1d3be710abe83136c0d58ac20ec9641e3eb,2025-03-04T14:51:45.513000 +CVE-2025-24126,0,1,93626dca5a2efcd9402a6fa0ef63a8a1935cafd987992c392cd02dfb12247155,2025-03-17T16:15:25.117000 CVE-2025-24127,0,0,1d2b043a0b9d762748f03a2275d3e997d6427b918bf46a124cf4e281353abd3f,2025-02-05T16:15:42.163000 CVE-2025-24128,0,0,b692dd6c3705d2f67ed46ab7eedb7af0c180ec823dc1f4569da7249148d6fcf7,2025-01-31T22:15:13.607000 CVE-2025-24129,0,0,f1e90fe08a69d64c55e11da92a9b3bc28db0dd31ae84f052c11f85bf5bf81c15,2025-01-31T22:15:13.773000 @@ -284212,7 +284218,7 @@ CVE-2025-24807,0,0,a9342833f23aca9efb5658eaedc615b0791a1b8d97d1be177e79dcc0108d2 CVE-2025-24810,0,0,5dc96a04891b646d8f099d1fa627e0a60065bb9f47866c74211a0f5415867e23,2025-01-28T05:15:11.413000 CVE-2025-24811,0,0,2da7e99907675b0c3b84fff601eb43c4c4c27c662d95c7205901bce5bb8705d8,2025-02-11T11:15:16.907000 CVE-2025-24812,0,0,3542fd62679fcd1754aabe0f38d924c5bd34578dfc13aa46aeaa150dd810a16a,2025-02-11T11:15:17.080000 -CVE-2025-24813,0,0,bd0fbd1152ad5c7db3ebdd644e949c319f78219067422b536027f22c8d5d7084,2025-03-12T19:15:38.637000 +CVE-2025-24813,0,1,74bcac62d22f1d058b2204263a509205db746b39180a79515430c5f759c43dec,2025-03-17T16:15:25.343000 CVE-2025-24814,0,0,778c51f4f444afc315901ebeb1d1515ad066d9ae9182f0d62b926c00ff924803,2025-02-15T01:15:11.157000 CVE-2025-24826,0,0,afc4a3c6aa0e8288830e8c91cc81c25b8636a1b49a80120ea49c59c3d903f3ac,2025-01-28T21:15:18.817000 CVE-2025-24827,0,0,9def413bdd8ee8b51fbd9a0d5033d038fbca6373f01b1c0b3f27d7c9c702b649,2025-02-18T19:15:27.587000 @@ -284563,22 +284569,26 @@ CVE-2025-25604,0,0,7a8cc3234dfcf2fd463e6a54d1695816511ffd986519d0bafcb53e4f83d30 CVE-2025-25605,0,0,c0858a3094cad59e4cf6248dc23b2aa0633fe28bfdda9aca36970755a7dbfbce,2025-02-21T21:15:24.317000 CVE-2025-25609,0,0,266dd94a110ece3c3e14be6241a6b4dfd9dca67d8afeac437f4e4e876c6d5556,2025-03-05T16:15:39.460000 CVE-2025-25610,0,0,fe8057df3f08f41d60fe1ebc6a06e1b6051f3d9bb1f1a3b3ed10e5a9eef74dbc,2025-03-05T16:15:39.623000 +CVE-2025-25612,1,1,70f234bb9415de72953268806712041236ac3ac20ea1f4edd4a9b34020ad5396,2025-03-17T15:15:43.907000 CVE-2025-25614,0,0,a061fd28fa65ddcfb4ed8f2a56829d30e68a6722cf38abd81a56f36279e7ce01,2025-03-10T20:15:14.280000 CVE-2025-25615,0,0,e017c1e8362067196dff6a4ab7a37964b95c3b97fd5434db4dcfcea4137afb37,2025-03-13T18:01:27.860000 CVE-2025-25616,0,0,cf785e4cd60695d24dd22a04cc35febccc74308f8869df8a5484fdb2462187d5,2025-03-13T18:04:20.497000 CVE-2025-25617,0,0,3f661497fa69da30bb91f642820b6cfcf05fca2c3dd7a67bf0915aa5050b465c,2025-03-07T18:15:47.840000 +CVE-2025-25618,1,1,8242027277aa6655574e7a424588dbd2c244b7aadbf70587efb0863e6167097a,2025-03-17T15:15:44.040000 CVE-2025-25620,0,0,2998f203d004ba2c3686a85bfd6e4a9c803d92001b76576bf7ced9c40410ee3c,2025-03-10T19:15:40.393000 +CVE-2025-25621,1,1,95763489729be1be3af672923892b6ac9992c94649f2a6158408331ff646ed84,2025-03-17T15:15:44.173000 CVE-2025-25625,0,0,ff016e7efb2859abce0dc64f0e6f99c1b497fafc29db9c50a3fa498982065f03,2025-03-13T15:15:53.650000 CVE-2025-25632,0,0,1ceebf9a7f4f0a07c0d7243ce1a1b61926f60bcdd3649b2e6df48cfbf3246b4c,2025-03-06T15:15:17.770000 CVE-2025-25634,0,0,7d5efbb3a02c594499ed06a9a27e13e1f935c77ecfc5e148d76deae63172e1dc,2025-03-06T22:15:35.290000 CVE-2025-25635,0,0,0db247b70226e51b14344c6fcb3514df042659a07d0da107baaaba8517f711fd,2025-03-05T16:15:39.793000 +CVE-2025-25650,1,1,bc81be186fb1b1138274a7b0f25683ea7be82f0c7d43e36d08f29a90b0da799f,2025-03-17T15:15:44.293000 CVE-2025-25662,0,0,d4416cf9571f254ff138d844bee48a97de56cce7c015b6a71760613be494b90e,2025-02-21T18:15:37.760000 -CVE-2025-25663,0,0,2c66463e17f0da9d9b59da03f32234807a5e0504a922f80726e5f203d3e2d884,2025-02-21T18:15:41.693000 -CVE-2025-25664,0,0,a850b1756187529b43d44abf29c2e6255214e11c23d9ad57a237c7a415fbb154,2025-02-21T18:15:45.417000 +CVE-2025-25663,0,1,5a746eea3634250332bacc9c924ac5e785f1cc29be7fb51e65232a0170bb6bbb,2025-03-17T15:10:12.850000 +CVE-2025-25664,0,1,1da9718d556db2a8964602e6e91c5c694bfb0281423a38648b821b59368a1401,2025-03-17T15:19:50.133000 CVE-2025-25667,0,0,6c0b0297748635f776714c0ebe80a05f6adac25162cb42e550787d760f969504,2025-02-21T18:15:49.247000 -CVE-2025-25668,0,0,729e4fefbc7da0d23aa96e4833b1abc314e453357edfa400169abdda747d409f,2025-02-21T18:15:53.063000 -CVE-2025-25674,0,1,8ce40ba3c5a2d332ca848bf332b28ce5e1ea817c4e5b7751e0bf1c1f0eeb7a9f,2025-03-17T14:23:02.403000 -CVE-2025-25675,0,1,c72dca8ea86886a3af81f324f3cf1b0ae0870a19e6aae0e2e014084eb2e1c680,2025-03-17T14:26:22.483000 +CVE-2025-25668,0,1,3a390720dec3e2d486dc54a6361f2f35ae4d39f099b715395f225090d62ea40f,2025-03-17T16:59:59.693000 +CVE-2025-25674,0,0,8ce40ba3c5a2d332ca848bf332b28ce5e1ea817c4e5b7751e0bf1c1f0eeb7a9f,2025-03-17T14:23:02.403000 +CVE-2025-25675,0,0,c72dca8ea86886a3af81f324f3cf1b0ae0870a19e6aae0e2e014084eb2e1c680,2025-03-17T14:26:22.483000 CVE-2025-25676,0,0,daf85732e597f1793e01b57a88af2ab73ae5e7b139e5e84dbb4cacf83744c130,2025-02-21T18:16:04.577000 CVE-2025-25678,0,0,64aaf58170ee4d79f4247ea2c0b96da46219dfaa04983aca5741969381b237f2,2025-02-21T18:16:08.493000 CVE-2025-25679,0,0,3cebd49dfacc441892528658235bae2847665b7e89bb57bdaf15bcd2a8d49f09,2025-02-24T18:15:19.213000 @@ -284694,6 +284704,7 @@ CVE-2025-26014,0,0,0e63db03b12de770f19f2e4a205d81f3b9f22e3b31412c31dff023e0922ec CVE-2025-26047,0,0,e5f969b85e25d20e576d529c079698dda076726cc7fa9835a0c501d496a29bb3,2025-03-06T21:15:15.623000 CVE-2025-26058,0,0,d6830ee74802882f622367eb3e014df2c057afc37826d4d9d4aaa490f6e8cee5,2025-02-19T21:15:15.920000 CVE-2025-26091,0,0,0a53a3c2cb2d2c7caf4bc303bc2b91dad9caaf8869a6ee9842c32b5a6487c809,2025-03-04T17:15:18.243000 +CVE-2025-26127,1,1,ee2c3ba210c8ce51342f97006660dfcdd9403864f89f25197e139fb39b2351e3,2025-03-17T15:15:44.427000 CVE-2025-26136,0,0,2adb34c79a3ec7fe584c4e7725e79c104805fdaa01d3b24e5975e14259ccd144,2025-03-05T17:15:16.017000 CVE-2025-26156,0,0,3c070f48ae01803cf4deab6e20453c0715f07513428e1a7ccf93241deeb274fe,2025-02-14T19:15:15.033000 CVE-2025-26157,0,0,59b5a4f935b691a0cfae6c8ea0b4bbb0d47e4814d1aa791e95c7dd113790e9fc,2025-02-14T20:15:37.543000 @@ -284720,7 +284731,7 @@ CVE-2025-26308,0,0,69e4926ab121453dd269ecd5c4a1e680c76cfe3a7adc73ca0152c52aac5d4 CVE-2025-26309,0,0,7ae8d8b0652f85e6f8fa255fc222f026973cab38848f066168ff295eb6f4ee31,2025-02-21T18:16:13.790000 CVE-2025-26310,0,0,55b236dbeb9a20179e9b06fa335fdfa1062067456641081301fd898e499e9d2b,2025-02-21T18:16:17.950000 CVE-2025-26311,0,0,8f41ce6db700f92fea4726f2c9198369bec586ae5a386ba2dec789165ea39c8e,2025-02-20T21:15:25.907000 -CVE-2025-26312,0,0,f720ae4b4a85b5954d09e3d4e5a51ac27782d28b91b78e40f2a36a97db40d717,2025-03-14T18:15:31.817000 +CVE-2025-26312,0,1,f394aa1aa4dfb775ebb7188f76a9b0a21eaabe1fd9b9e3fe5dc73353a18f5288,2025-03-17T16:15:25.637000 CVE-2025-26318,0,0,16686eed1a2dd200b3d251994a33e38e9220f5ca5f67b4df87c6beb26b606734,2025-03-05T17:15:16.180000 CVE-2025-26319,0,0,f00500492e7a3f0a2bff919ad8b60c606fcf031aa95c7496eeafad4b93d44cff,2025-03-05T17:15:16.340000 CVE-2025-26320,0,0,2c7c4543047844dc51d38a0e0844ae377a705f600f7e38264bf4c89a9fa42fbb,2025-03-05T19:15:39.173000 @@ -285034,7 +285045,7 @@ CVE-2025-27098,0,0,873fcb90264f4e04a047cee2cfc6d823db0b6142c91033a12829dbc6dd942 CVE-2025-27099,0,0,e0a8674e5982bed778d53380d1b5e133811de7e5fe1cff344a8cdd4483cf2db8,2025-03-03T17:15:15.533000 CVE-2025-27100,0,0,e8e728a94b37df8d941f1021ffd1ce6798ea17728dd5164f5aca39df84532b59,2025-02-21T00:15:09.250000 CVE-2025-27101,0,0,ab8565243e455f0a24cdc3e6e0cd68e02ad81f50ec958a31940a9a3c43faa226,2025-03-12T14:15:16.203000 -CVE-2025-27102,1,1,7119fc58a7ba79f7ce0a70143ba684828bc8680c97b428df29d7d81cbd517a66,2025-03-17T14:15:21.867000 +CVE-2025-27102,0,0,7119fc58a7ba79f7ce0a70143ba684828bc8680c97b428df29d7d81cbd517a66,2025-03-17T14:15:21.867000 CVE-2025-27103,0,0,f1bdd206a1af67f1cffa8e6cceecee02999d4a4207dce43e2cf98bff69e86457,2025-03-13T20:15:26.270000 CVE-2025-27104,0,0,db08a4c948fc11797e4258ffc992c2c766c2c60f6bb4613e3fe0360292b496dc,2025-02-22T16:15:32.640000 CVE-2025-27105,0,0,df9e9eacd546987ca285a6d087354c1720d68ee71843aaeedd241da5e8b62276,2025-02-22T16:15:32.827000 @@ -285216,6 +285227,7 @@ CVE-2025-27507,0,0,f102904d74ef14427d4091398f7ee4e6c4c616cd5703ded2fd821f8eb925d CVE-2025-27508,0,0,f715817c4f100acb64f230b192c6c7e1e45a0a1b5dc8999db4503d2d4c79106a,2025-03-07T18:15:48.033000 CVE-2025-27509,0,0,b19e817ae53fb2adc8450fe87e6915009aecb03de30411e2e5b5d839939c31c7,2025-03-06T19:15:27.973000 CVE-2025-27510,0,0,ac4f7f7024da7b86cbb69ce4ceeef3932c0db8be95e2227b9a01f0be4cf0881d,2025-03-05T17:15:16.597000 +CVE-2025-27512,1,1,a5ef4a1106258f3f440aa85bdda492bd961c8ac31e096f3c2224ed9c7d06e7de,2025-03-17T15:15:44.557000 CVE-2025-27513,0,0,1ed9139bbfb8391739a7cca7d4cdbd5b57d836b7a54ea10db84c6c5c6b66d52e,2025-03-05T19:15:39.337000 CVE-2025-27515,0,0,b3ec7abd417e125876bea8a61b6b8966883c4fbbd62ed2934032145e0477d0d3,2025-03-05T19:15:39.483000 CVE-2025-27516,0,0,f21ea87f2fa7d6c189d50fb2ccebb86df369317f622219bd7aa7038d86bc217e,2025-03-05T21:15:20.073000 @@ -285250,7 +285262,7 @@ CVE-2025-27622,0,0,e1ae4e4be1d65cdd010a61423d287f61eee65b8bc22902c856e40f0e4963e CVE-2025-27623,0,0,971732dcbffe6942130f281161641575c57aec05747e6a7cc0997239bd8a6f05,2025-03-06T17:15:23.647000 CVE-2025-27624,0,0,da36f8fffe4978877022da178b05a4a5b4cfcf82b463e1a963f507b7d88cc625,2025-03-06T17:15:23.797000 CVE-2025-27625,0,0,7a7d16075ac02e2e4fa9607392e4b1922b338fef72722c2b646c0aacb79f0b5e,2025-03-06T17:15:23.960000 -CVE-2025-27636,0,0,5bafc0fecd15d94cfbee1ce114845de5110d6d0dfb658863b338fe123110c3fe,2025-03-12T11:15:41.673000 +CVE-2025-27636,0,1,01d5ca04dc9864059707b72db492cf0d0c0bbf81770970147e11edb684eb5bcb,2025-03-17T15:15:44.750000 CVE-2025-27637,0,0,00dcd75d469e1cdd070357ebfa418b226d483cc6e1d8291f82f85ebe0beed72d,2025-03-05T16:15:40.713000 CVE-2025-27638,0,0,9ce50ff389088231aa971b9d41abf85dcd24d2f2c68974d7a5072e30632aa74a,2025-03-05T17:15:16.853000 CVE-2025-27639,0,0,2d2a4ff32f105b3467b03e4a639c443e2736e38f6930fc8cd6a165f63cdf77bc,2025-03-05T17:15:17.027000 @@ -285415,9 +285427,9 @@ CVE-2025-29776,0,0,2bcf19cfe229ac44c33a42ac99a787c07bb1a792d9e30568e2fdaf86395b3 CVE-2025-29779,0,0,f94912e4775e10dfe50b061ca0c1c5097a0c3f261c6939cb83b19433bd55af7a,2025-03-14T18:15:32.330000 CVE-2025-29780,0,0,6ef40c4b98f97bb03df3800eb89a6c6e47d766d28548870077283af7cf121185,2025-03-14T18:15:32.503000 CVE-2025-29782,0,0,a79518f63be9c881de8db0a0651ea1fe984913327462a61af7597165766c4b7e,2025-03-14T19:15:49.190000 -CVE-2025-29786,1,1,0c40fa5408515757638473e28641812347d31da5efea9c126f50ced0bd11d506,2025-03-17T14:15:22.237000 -CVE-2025-29787,1,1,f2e861b6c4dbf868707fba7b3fb131d1b9814d3e4021455a52a8a2d5236bf0cb,2025-03-17T14:15:22.447000 -CVE-2025-29788,1,1,e1a88fbf2eb4e52db6d664e73916facba347fa2e80c6c15ea20d2760d435bf11,2025-03-17T14:15:22.653000 +CVE-2025-29786,0,0,0c40fa5408515757638473e28641812347d31da5efea9c126f50ced0bd11d506,2025-03-17T14:15:22.237000 +CVE-2025-29787,0,0,f2e861b6c4dbf868707fba7b3fb131d1b9814d3e4021455a52a8a2d5236bf0cb,2025-03-17T14:15:22.447000 +CVE-2025-29788,0,0,e1a88fbf2eb4e52db6d664e73916facba347fa2e80c6c15ea20d2760d435bf11,2025-03-17T14:15:22.653000 CVE-2025-29891,0,0,19957216c682a927ada7fbe8d799bf8aa1337ea00af552d450ee80a227a50322,2025-03-13T09:15:14.860000 CVE-2025-29903,0,0,10c68e7ddaac62cfaf56fa2d0c36952343de94dcaf74d7de9700d239804e47d3,2025-03-12T13:15:37.823000 CVE-2025-29904,0,0,8151be9d68bba0e8c527ecea5490dd29fd8894724b2933080703a0ecee03e639,2025-03-12T13:15:38.050000 @@ -285429,6 +285441,7 @@ CVE-2025-29998,0,0,f3a82be3b9ce90965eef31dd3d04a06fbca5fc5f31b02ac26305664f3f7de CVE-2025-30022,0,0,2bbf4fa055fd725723d405bb131a4cfd34b9f8909da4fc3e54c5f19c6cbb00ed,2025-03-14T03:15:45.257000 CVE-2025-30066,0,0,3bca4d257af2b8d029f5bbcd39a922326cd003d1d3cb1647a27134c8af09d171,2025-03-16T23:15:48.060000 CVE-2025-30074,0,0,5d0dfb842ba5d24afb134fe0eb5f7e2e10f0c5619590d2c6aaa9483b4a17999a,2025-03-16T03:15:39.117000 -CVE-2025-30076,0,0,73b545175c622f545b3e58f187da27cc5145bebf384c71534063285e97c9fef3,2025-03-16T03:15:39.273000 -CVE-2025-30077,0,0,2db345dd70e7b66b3b6a900a65df42bbd4951033f7463cd688ce7463166f7e72,2025-03-16T03:15:39.437000 -CVE-2025-30089,0,0,1258c8ee3055edfab1653584b44b31bfcd0654c3995194925ce77b056444f37b,2025-03-17T01:15:37.653000 +CVE-2025-30076,0,1,ae70a6cce406a05e108d38c82fa058b5f2fc46a32f1bafe789b6ecdef84b3c03,2025-03-17T16:15:28.220000 +CVE-2025-30077,0,1,3552a491790a6839d39471705d681d0b56a0da48a2daaa633f419312864c12e5,2025-03-17T16:15:28.360000 +CVE-2025-30089,0,1,26c0c3e573114b1e3e240c2d6bcb88b42d7bf3c75b6c33122ef4296822dfa500,2025-03-17T16:15:28.507000 +CVE-2025-30143,1,1,dfaeb3eef5e72894446a00bc252dd02d40d218e0a77cd9256d63da4e0a89e02b,2025-03-17T16:15:28.643000