From 1d366b710f06f56128fcc64186303e730ddb0e67 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Sun, 24 Dec 2023 09:00:27 +0000 Subject: [PATCH] Auto-Update: 2023-12-24T09:00:24.094748+00:00 --- CVE-2023/CVE-2023-517xx/CVE-2023-51767.json | 28 +++++++++++++++++++++ README.md | 12 ++++----- 2 files changed, 33 insertions(+), 7 deletions(-) create mode 100644 CVE-2023/CVE-2023-517xx/CVE-2023-51767.json diff --git a/CVE-2023/CVE-2023-517xx/CVE-2023-51767.json b/CVE-2023/CVE-2023-517xx/CVE-2023-51767.json new file mode 100644 index 00000000000..6d51d53bc61 --- /dev/null +++ b/CVE-2023/CVE-2023-517xx/CVE-2023-51767.json @@ -0,0 +1,28 @@ +{ + "id": "CVE-2023-51767", + "sourceIdentifier": "cve@mitre.org", + "published": "2023-12-24T07:15:07.410", + "lastModified": "2023-12-24T07:15:07.410", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://arxiv.org/abs/2309.02545", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 1bc3b26c7be..cc42ddb1f40 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-12-24T07:00:24.631143+00:00 +2023-12-24T09:00:24.094748+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-12-24T06:15:07.673000+00:00 +2023-12-24T07:15:07.410000+00:00 ``` ### Last Data Feed Release @@ -29,16 +29,14 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -234154 +234155 ``` ### CVEs added in the last Commit -Recently added CVEs: `3` +Recently added CVEs: `1` -* [CVE-2023-51764](CVE-2023/CVE-2023-517xx/CVE-2023-51764.json) (`2023-12-24T05:15:08.273`) -* [CVE-2023-51765](CVE-2023/CVE-2023-517xx/CVE-2023-51765.json) (`2023-12-24T06:15:07.527`) -* [CVE-2023-51766](CVE-2023/CVE-2023-517xx/CVE-2023-51766.json) (`2023-12-24T06:15:07.673`) +* [CVE-2023-51767](CVE-2023/CVE-2023-517xx/CVE-2023-51767.json) (`2023-12-24T07:15:07.410`) ### CVEs modified in the last Commit