Auto-Update: 2023-11-23T19:01:02.537193+00:00

This commit is contained in:
cad-safe-bot 2023-11-23 19:01:07 +00:00
parent 65d49eceea
commit c14dc6c1c3
3 changed files with 97 additions and 7 deletions

View File

@ -0,0 +1,24 @@
{
"id": "CVE-2023-49208",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-11-23T18:15:07.410",
"lastModified": "2023-11-23T18:15:07.410",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/babelouest/glewlwyd/commit/f9d8c06aae8dfe17e761b18b577ff169e059e812",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/babelouest/glewlwyd/releases/tag/v2.7.6",
"source": "cve@mitre.org"
}
]
}

View File

@ -0,0 +1,67 @@
{
"id": "CVE-2023-5972",
"sourceIdentifier": "secalert@redhat.com",
"published": "2023-11-23T18:15:07.470",
"lastModified": "2023-11-23T18:15:07.470",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "secalert@redhat.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "secalert@redhat.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2023-5972",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248189",
"source": "secalert@redhat.com"
},
{
"url": "https://github.com/torvalds/linux/commit/505ce0630ad5d31185695f8a29dde8d29f28faa7",
"source": "secalert@redhat.com"
},
{
"url": "https://github.com/torvalds/linux/commit/52177bbf19e6e9398375a148d2e13ed492b40b80",
"source": "secalert@redhat.com"
}
]
}

View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-11-23T17:01:54.836131+00:00
2023-11-23T19:01:02.537193+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-11-23T16:15:07.273000+00:00
2023-11-23T18:15:07.470000+00:00
```
### Last Data Feed Release
@ -29,16 +29,15 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
231457
231459
```
### CVEs added in the last Commit
Recently added CVEs: `3`
Recently added CVEs: `2`
* [CVE-2022-44010](CVE-2022/CVE-2022-440xx/CVE-2022-44010.json) (`2023-11-23T16:15:07.157`)
* [CVE-2022-44011](CVE-2022/CVE-2022-440xx/CVE-2022-44011.json) (`2023-11-23T16:15:07.217`)
* [CVE-2023-33202](CVE-2023/CVE-2023-332xx/CVE-2023-33202.json) (`2023-11-23T16:15:07.273`)
* [CVE-2023-49208](CVE-2023/CVE-2023-492xx/CVE-2023-49208.json) (`2023-11-23T18:15:07.410`)
* [CVE-2023-5972](CVE-2023/CVE-2023-59xx/CVE-2023-5972.json) (`2023-11-23T18:15:07.470`)
### CVEs modified in the last Commit