Auto-Update: 2023-04-26T16:00:11.832393+00:00

CVE-2020/CVE-2020-281xx/CVE-2020-28163.json

@@ -2,31 +2,98 @@
   "id": "CVE-2020-28163",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2023-04-16T00:15:07.313",
-  "lastModified": "2023-04-17T13:12:43.170",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2023-04-26T15:42:38.570",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
       "value": "libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname."
     }
   ],
-  "metrics": {},
+  "metrics": {
+    "cvssMetricV31": [
+      {
+        "source": "nvd@nist.gov",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 3.6
+      }
+    ]
+  },
+  "weaknesses": [
+    {
+      "source": "nvd@nist.gov",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-476"
+        }
+      ]
+    }
+  ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:libdwarf_project:libdwarf:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "2020-12-01",
+              "matchCriteriaId": "943A7698-9618-4025-80CB-D1D2C70345BA"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "http://web.archive.org/web/20190601140703/https://sourceforge.net/projects/libdwarf/",
-      "source": "cve@mitre.org"
+      "source": "cve@mitre.org",
+      "tags": [
+        "Product"
+      ]
     },
     {
       "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2026000",
-      "source": "cve@mitre.org"
+      "source": "cve@mitre.org",
+      "tags": [
+        "Issue Tracking",
+        "Permissions Required",
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://github.com/davea42/libdwarf-code/commit/faf99408e3f9f706fc3809dd400e831f989778d3",
-      "source": "cve@mitre.org"
+      "source": "cve@mitre.org",
+      "tags": [
+        "Patch"
+      ]
     },
     {
       "url": "https://www.prevanders.net/dwarfbug.html#DW202010-003",
-      "source": "cve@mitre.org"
+      "source": "cve@mitre.org",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }

README.md

@@ -9,13 +9,13 @@ Repository synchronizes with the NVD in 2 hour periods.
 ### Last repository update
 
 ```plain
-2023-04-26T14:00:24.315696+00:00
+2023-04-26T16:00:11.832393+00:00
 ```
 
 ### Most recent CVE modification timestamp synchronized with NVD
 
 ```plain
-2023-04-26T13:57:37.130000+00:00
+2023-04-26T15:42:38.570000+00:00
 ```
 
 ### Last Data Feed release
@@ -29,7 +29,7 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-datafeeds/r
 ### Total numbers of included CVEs
 
 ```plai#n
-213582
+213597
 ```
 
 ### CVEs added in the last commit
@@ -42,7 +42,7 @@ Recently added CVEs: `0`
 
 Recently modified CVEs: `1`
 
-* CVE-2022-30076 (*2023-04-26T13:57:37.130*)
+* CVE-2020-28163 (*2023-04-26T15:42:38.570*)
 
 
 ## Download and Usage