From 28a3cd5be8892a5fa702c21f10fe9cc0fde2215b Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Sat, 9 Sep 2023 16:00:27 +0000 Subject: [PATCH] Auto-Update: 2023-09-09T16:00:24.411162+00:00 --- CVE-2023/CVE-2023-48xx/CVE-2023-4874.json | 59 +++++++++++++++++++++++ CVE-2023/CVE-2023-48xx/CVE-2023-4875.json | 59 +++++++++++++++++++++++ README.md | 13 +++-- 3 files changed, 124 insertions(+), 7 deletions(-) create mode 100644 CVE-2023/CVE-2023-48xx/CVE-2023-4874.json create mode 100644 CVE-2023/CVE-2023-48xx/CVE-2023-4875.json diff --git a/CVE-2023/CVE-2023-48xx/CVE-2023-4874.json b/CVE-2023/CVE-2023-48xx/CVE-2023-4874.json new file mode 100644 index 00000000000..e717c84b05d --- /dev/null +++ b/CVE-2023/CVE-2023-48xx/CVE-2023-4874.json @@ -0,0 +1,59 @@ +{ + "id": "CVE-2023-4874", + "sourceIdentifier": "cve@gitlab.com", + "published": "2023-09-09T15:15:34.623", + "lastModified": "2023-09-09T15:15:34.623", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW", + "baseScore": 4.3, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-475" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/muttmua/mutt/-/commit/a4752eb0ae0a521eec02e59e51ae5daedf74fda0.patch", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-48xx/CVE-2023-4875.json b/CVE-2023/CVE-2023-48xx/CVE-2023-4875.json new file mode 100644 index 00000000000..bcabd341140 --- /dev/null +++ b/CVE-2023/CVE-2023-48xx/CVE-2023-4875.json @@ -0,0 +1,59 @@ +{ + "id": "CVE-2023-4875", + "sourceIdentifier": "cve@gitlab.com", + "published": "2023-09-09T15:15:35.500", + "lastModified": "2023-09-09T15:15:35.500", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW", + "baseScore": 2.2, + "baseSeverity": "LOW" + }, + "exploitabilityScore": 0.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-475" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/muttmua/mutt/-/commit/452ee330e094bfc7c9a68555e5152b1826534555.patch", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/muttmua/mutt/-/commit/4cc3128abdf52c615911589394a03271fddeefc6.patch", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 7a16933a658..65be71c8647 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-09-09T14:00:24.534410+00:00 +2023-09-09T16:00:24.411162+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-09-09T13:15:21.123000+00:00 +2023-09-09T15:15:35.500000+00:00 ``` ### Last Data Feed Release @@ -29,16 +29,15 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -224550 +224552 ``` ### CVEs added in the last Commit -Recently added CVEs: `3` +Recently added CVEs: `2` -* [CVE-2023-4850](CVE-2023/CVE-2023-48xx/CVE-2023-4850.json) (`2023-09-09T12:15:07.470`) -* [CVE-2023-4851](CVE-2023/CVE-2023-48xx/CVE-2023-4851.json) (`2023-09-09T12:15:08.300`) -* [CVE-2023-4852](CVE-2023/CVE-2023-48xx/CVE-2023-4852.json) (`2023-09-09T13:15:21.123`) +* [CVE-2023-4874](CVE-2023/CVE-2023-48xx/CVE-2023-4874.json) (`2023-09-09T15:15:34.623`) +* [CVE-2023-4875](CVE-2023/CVE-2023-48xx/CVE-2023-4875.json) (`2023-09-09T15:15:35.500`) ### CVEs modified in the last Commit