diff --git a/cmd/patch/README.md b/cmd/patch/README.md index 284bc3f3..cb4ba6ec 100644 --- a/cmd/patch/README.md +++ b/cmd/patch/README.md @@ -41,16 +41,15 @@ The patch command can be run in 2 ways: ### Flags -| Flag | Description | Required | Default | -|------|-------------|----------|---------| -| -i, --image | Image name to be patched (should be in canonical form) | Yes | | -| -r, --report | Generate reports of the image scan before and after patching | No | false | -| -a, --addr | Address of the buildkitd service | No | unix:///run/buildkit/buildkitd.sock | -| -t, --tag | Tag of the resultant patched image | No | image_name-patched | -| --timeout | Timeout for the patching process | No | 5m | -| -u, --username | Username for the image registry login | No | | -| -p, --password | Password for the image registry login | No | | -| -h, --help | help for patch | No | | +| Flag | Description | Required | Default | +| -------------- | ------------------------------------------------------ | -------- | ----------------------------------- | +| -i, --image | Image name to be patched (should be in canonical form) | Yes | | +| -a, --addr | Address of the buildkitd service | No | unix:///run/buildkit/buildkitd.sock | +| -t, --tag | Tag of the resultant patched image | No | image_name-patched | +| --timeout | Timeout for the patching process | No | 5m | +| -u, --username | Username for the image registry login | No | | +| -p, --password | Password for the image registry login | No | | +| -h, --help | help for patch | No | | ## Example @@ -76,27 +75,60 @@ We will demonstrate how to use the patch command with an example of [nginx](http sudo kubescape patch --image docker.io/library/nginx:1.22 ``` -3. The output will be similar to: +3. You will get an output like below: ```bash - [info] Scanning image... - [success] Scanned image successfully - [info] Patching image... - ... - [success] Patched image successfully - [info] Re-scanning image... - [success] Re-scanned image successfully - [info] Preparing results ... + ✅ Successfully scanned image: docker.io/library/nginx:1.22 + ✅ Patched image successfully. Loaded image: nginx:1.22-patched + ✅ Successfully re-scanned image: nginx:1.22-patched + + | Severity | Vulnerability | Component | Version | Fixed In | + | -------- | -------------- | ------------- | ----------------------- | -------- | + | Critical | CVE-2023-23914 | curl | 7.74.0-1.3+deb11u7 | wont-fix | + | Critical | CVE-2019-8457 | libdb5.3 | 5.3.28+dfsg1-0.8 | wont-fix | + | High | CVE-2022-42916 | libcurl4 | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2022-1304 | libext2fs2 | 1.46.2-2 | wont-fix | + | High | CVE-2022-42916 | curl | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2022-1304 | e2fsprogs | 1.46.2-2 | wont-fix | + | High | CVE-2022-1304 | libcom-err2 | 1.46.2-2 | wont-fix | + | High | CVE-2023-27533 | curl | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2023-27534 | libcurl4 | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2023-27533 | libcurl4 | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2022-43551 | libcurl4 | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2022-3715 | bash | 5.1-2+deb11u1 | wont-fix | + | High | CVE-2023-27534 | curl | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2022-43551 | curl | 7.74.0-1.3+deb11u7 | wont-fix | + | High | CVE-2021-33560 | libgcrypt20 | 1.8.7-6 | wont-fix | + | High | CVE-2023-2953 | libldap-2.4-2 | 2.4.57+dfsg-3+deb11u1 | wont-fix | + | High | CVE-2022-1304 | libss2 | 1.46.2-2 | wont-fix | + | High | CVE-2020-22218 | libssh2-1 | 1.9.0-2 | wont-fix | + | High | CVE-2023-29491 | libtinfo6 | 6.2+20201114-2+deb11u1 | wont-fix | + | High | CVE-2022-2309 | libxml2 | 2.9.10+dfsg-6.7+deb11u4 | wont-fix | + | High | CVE-2022-4899 | libzstd1 | 1.4.8+dfsg-2.1 | wont-fix | + | High | CVE-2022-1304 | logsave | 1.46.2-2 | wont-fix | + | High | CVE-2023-29491 | ncurses-base | 6.2+20201114-2+deb11u1 | wont-fix | + | High | CVE-2023-29491 | ncurses-bin | 6.2+20201114-2+deb11u1 | wont-fix | + | High | CVE-2023-31484 | perl-base | 5.32.1-4+deb11u2 | wont-fix | + | High | CVE-2020-16156 | perl-base | 5.32.1-4+deb11u2 | wont-fix | - Vulnerability summary: - Image: docker.io/library/nginx:1.22 - * Total CVE's : 175 - * Fixable CVE's: 23 - - Image: docker.io/library/nginx:1.22-patched - * Total CVE's : 152 - * Fixable CVE's: 0 + Vulnerability summary - 161 vulnerabilities found: + Image: nginx:1.22-patched + * 3 Critical + * 24 High + * 31 Medium + * 103 Other + Most vulnerable components: + * curl (7.74.0-1.3+deb11u7) - 1 Critical, 4 High, 5 Medium, 1 Low, 3 Negligible + * libcurl4 (7.74.0-1.3+deb11u7) - 1 Critical, 4 High, 5 Medium, 1 Low, 3 Negligible + * libtiff5 (4.2.0-1+deb11u4) - 7 Medium, 10 Negligible, 2 Unknown + * libxml2 (2.9.10+dfsg-6.7+deb11u4) - 1 High, 2 Medium + * perl-base (5.32.1-4+deb11u2) - 2 High, 2 Negligible + + What now? + ───────── + * Run with '--verbose'/'-v' flag for detailed vulnerabilities view + * Install Kubescape in your cluster for continuous monitoring and a full vulnerability report: https://github.com/kubescape/helm-charts/tree/main/charts/kubescape-cloud-operator ``` ## Limitations diff --git a/cmd/patch/patch.go b/cmd/patch/patch.go index 58b4e20f..28e1e31f 100644 --- a/cmd/patch/patch.go +++ b/cmd/patch/patch.go @@ -64,7 +64,7 @@ func validateImagePatchInfo(patchInfo *metav1.PatchInfo) error { } // Convert image to canonical format (required by copacetic for patching images) - patchInfoImage, err := cautils.Normalize_image_name(patchInfo.Image) + patchInfoImage, err := cautils.NormalizeImageName(patchInfo.Image) if err != nil { return nil } diff --git a/core/cautils/normalize_image_name.go b/core/cautils/normalize_image_name.go index bea97adf..40f407ca 100644 --- a/core/cautils/normalize_image_name.go +++ b/core/cautils/normalize_image_name.go @@ -4,7 +4,7 @@ import ( "github.com/docker/distribution/reference" ) -func Normalize_image_name(img string) (string, error) { +func NormalizeImageName(img string) (string, error) { name, err := reference.ParseNormalizedNamed(img) if err != nil { return "", err diff --git a/core/cautils/normalize_image_name_test.go b/core/cautils/normalize_image_name_test.go index d78c91b8..ed738259 100644 --- a/core/cautils/normalize_image_name_test.go +++ b/core/cautils/normalize_image_name_test.go @@ -21,7 +21,7 @@ func Test_normalize_name(t *testing.T) { } for _, tt := range tests { t.Run(tt.name, func(t *testing.T) { - name, _ := Normalize_image_name(tt.img) + name, _ := NormalizeImageName(tt.img) assert.Equal(t, tt.want, name, tt.name) }) } diff --git a/core/core/patch.go b/core/core/patch.go index 1b4cc0bc..2ce1c7a4 100644 --- a/core/core/patch.go +++ b/core/core/patch.go @@ -9,7 +9,7 @@ import ( "github.com/anchore/grype/grype/presenter" logger "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" - "github.com/kubescape/go-logger/iconlogger" + "github.com/kubescape/kubescape/v2/core/cautils" ksmetav1 "github.com/kubescape/kubescape/v2/core/meta/datastructures/v1" "github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer" @@ -22,7 +22,6 @@ import ( func (ks *Kubescape) Patch(ctx context.Context, patchInfo *ksmetav1.PatchInfo) error { - logger.InitLogger(iconlogger.LoggerName) // ===================== Scan the image ===================== logger.L().Start(fmt.Sprintf("Scanning image: %s", patchInfo.Image)) @@ -63,9 +62,8 @@ func (ks *Kubescape) Patch(ctx context.Context, patchInfo *ksmetav1.PatchInfo) e return err } - if logger.L().GetLevel() != "debug" { - enableCopaLogger(sout, serr) - } + // Restore the output streams + os.Stdout, os.Stderr = sout, serr patchedImageName := fmt.Sprintf("%s:%s", patchInfo.ImageName, patchInfo.PatchedImageTag) logger.L().StopSuccess(fmt.Sprintf("Patched image successfully. Loaded image: %s", patchedImageName)) @@ -109,8 +107,3 @@ func disableCopaLogger() { null, _ := os.Open(os.DevNull) log.SetOutput(null) } - -func enableCopaLogger(sout, serr *os.File) { - os.Stdout, os.Stderr = sout, serr - log.SetOutput(os.Stdout) -} diff --git a/core/pkg/opaprocessor/utils.go b/core/pkg/opaprocessor/utils.go index a38189f5..7c8d0237 100644 --- a/core/pkg/opaprocessor/utils.go +++ b/core/pkg/opaprocessor/utils.go @@ -106,6 +106,6 @@ var imageNameNormalizeDefinition = func(bctx rego.BuiltinContext, a *ast.Term) ( if err != nil { return nil, fmt.Errorf("invalid parameter type: %v", err) } - normalizedName, err := cautils.Normalize_image_name(string(aStr)) + normalizedName, err := cautils.NormalizeImageName(string(aStr)) return ast.StringTerm(normalizedName), err } diff --git a/nginx:latest.json b/nginx:latest.json deleted file mode 100644 index c5146a94..00000000 --- a/nginx:latest.json +++ /dev/null @@ -1,19048 +0,0 @@ -{ - "matches": [ - { - "vulnerability": { - "id": "CVE-2011-3374", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2011-3374", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2011-3374" - ], - "description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2011-3374", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2011-3374", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "https://access.redhat.com/security/cve/cve-2011-3374", - "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480", - "https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html", - "https://seclists.org/fulldisclosure/2011/Sep/221", - "https://security-tracker.debian.org/tracker/CVE-2011-3374", - "https://snyk.io/vuln/SNYK-LINUX-APT-116518", - "https://ubuntu.com/security/CVE-2011-3374" - ], - "description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 3.7, - "exploitabilityScore": 2.2, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "apt", - "version": "2.2.4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2011-3374" - } - } - ], - "artifact": { - "id": "35d8a2a477e2fc2f", - "name": "apt", - "version": "2.2.4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/apt/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/apt.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/apt.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2", - "GPLv2+" - ], - "cpes": [ - "cpe:2.3:a:apt:apt:2.2.4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/apt@2.2.4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2022-3715", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-3715", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-3715" - ], - "description": "A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-3715", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-3715", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://bugzilla.redhat.com/show_bug.cgi?id=2126720" - ], - "description": "A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "bash", - "version": "5.1-2+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-3715" - } - } - ], - "artifact": { - "id": "e32e410796716c30", - "name": "bash", - "version": "5.1-2+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/bash/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/bash.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/bash.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-3" - ], - "cpes": [ - "cpe:2.3:a:bash:bash:5.1-2+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/bash@5.1-2+deb11u1?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2022-0563", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-0563", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-0563" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-0563", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-0563", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u", - "https://security.netapp.com/advisory/ntap-20220331-0002/" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "util-linux", - "version": "2.36.1-8+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-0563" - } - } - ], - "artifact": { - "id": "4d5fea29af890d85", - "name": "bsdutils", - "version": "1:2.36.1-8+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/bsdutils/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/bsdutils.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-2-clause", - "BSD-3-clause", - "BSD-4-clause", - "GPL-2", - "GPL-2+", - "GPL-3", - "GPL-3+", - "LGPL", - "LGPL-2", - "LGPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "LGPL-3", - "LGPL-3+", - "MIT", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:bsdutils:bsdutils:1:2.36.1-8+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/bsdutils@1:2.36.1-8+deb11u1?arch=amd64&upstream=util-linux%402.36.1-8+deb11u1&distro=debian-11", - "upstreams": [ - { - "name": "util-linux", - "version": "2.36.1-8+deb11u1" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2016-2781", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2016-2781", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2016-2781" - ], - "description": "chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2016-2781", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2016-2781", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openwall.com/lists/oss-security/2016/02/28/2", - "http://www.openwall.com/lists/oss-security/2016/02/28/3", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 2.1, - "exploitabilityScore": 3.9, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2, - "impactScore": 4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "coreutils", - "version": "8.32-4+b1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2016-2781" - } - }, - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "coreutils", - "version": "8.32-4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2016-2781" - } - } - ], - "artifact": { - "id": "daeac3deb7976b32", - "name": "coreutils", - "version": "8.32-4+b1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/coreutils/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/coreutils.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-3" - ], - "cpes": [ - "cpe:2.3:a:coreutils:coreutils:8.32-4+b1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11", - "upstreams": [ - { - "name": "coreutils", - "version": "8.32-4" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-18018", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-18018", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-18018" - ], - "description": "In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX \"-R -L\" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-18018", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-18018", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html" - ], - "description": "In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX \"-R -L\" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 4.7, - "exploitabilityScore": 1, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "coreutils", - "version": "8.32-4+b1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-18018" - } - }, - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "coreutils", - "version": "8.32-4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-18018" - } - } - ], - "artifact": { - "id": "daeac3deb7976b32", - "name": "coreutils", - "version": "8.32-4+b1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/coreutils/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/coreutils.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-3" - ], - "cpes": [ - "cpe:2.3:a:coreutils:coreutils:8.32-4+b1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/coreutils@8.32-4+b1?arch=amd64&upstream=coreutils%408.32-4&distro=debian-11", - "upstreams": [ - { - "name": "coreutils", - "version": "8.32-4" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-23914", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-23914", - "namespace": "debian:distro:debian:11", - "severity": "Critical", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-23914" - ], - "description": "A cleartext transmission of sensitive information vulnerability exists in curl n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2018-5709", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2018-5709", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "krb5", - "version": "1.18.3-6+deb11u3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2018-5709" - } - } - ], - "artifact": { - "id": "b78525f3ebdfdfd8", - "name": "libgssapi-krb5-2", - "version": "1.18.3-6+deb11u3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libgssapi-krb5-2/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.18.3-6+deb11u3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11", - "upstreams": [ - { - "name": "krb5" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-9937", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-9937", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-9937" - ], - "description": "In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-9937", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-9937", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://bugzilla.maptools.org/show_bug.cgi?id=2707", - "http://www.securityfocus.com/bid/99304", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "jbigkit", - "version": "2.1-3.1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-9937" - } - } - ], - "artifact": { - "id": "1fdc95f53bdaa2e3", - "name": "libjbig0", - "version": "2.1-3.1+b2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libjbig0/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libjbig0:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2", - "GPL-2+" - ], - "cpes": [ - "cpe:2.3:a:libjbig0:libjbig0:2.1-3.1+b2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libjbig0@2.1-3.1+b2?arch=amd64&upstream=jbigkit%402.1-3.1&distro=debian-11", - "upstreams": [ - { - "name": "jbigkit", - "version": "2.1-3.1" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2021-46822", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2021-46822", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2021-46822" - ], - "description": "The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2021-46822", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2021-46822", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://exchange.xforce.ibmcloud.com/vulnerabilities/221567", - "https://github.com/libjpeg-turbo/libjpeg-turbo/commit/f35fd27ec641c42d6b115bfa595e483ec58188d2" - ], - "description": "The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libjpeg-turbo", - "version": "1:2.0.6-4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2021-46822" - } - } - ], - "artifact": { - "id": "20514b4ebbedb12b", - "name": "libjpeg62-turbo", - "version": "1:2.0.6-4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libjpeg62-turbo/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libjpeg62-turbo:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-3", - "BSD-BY-LC-NE", - "Expat", - "NTP", - "zlib" - ], - "cpes": [ - "cpe:2.3:a:libjpeg62-turbo:libjpeg62-turbo:1:2.0.6-4:*:*:*:*:*:*:*", - "cpe:2.3:a:libjpeg62-turbo:libjpeg62_turbo:1:2.0.6-4:*:*:*:*:*:*:*", - "cpe:2.3:a:libjpeg62_turbo:libjpeg62-turbo:1:2.0.6-4:*:*:*:*:*:*:*", - "cpe:2.3:a:libjpeg62_turbo:libjpeg62_turbo:1:2.0.6-4:*:*:*:*:*:*:*", - "cpe:2.3:a:libjpeg62:libjpeg62-turbo:1:2.0.6-4:*:*:*:*:*:*:*", - "cpe:2.3:a:libjpeg62:libjpeg62_turbo:1:2.0.6-4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libjpeg62-turbo@1:2.0.6-4?arch=amd64&upstream=libjpeg-turbo&distro=debian-11", - "upstreams": [ - { - "name": "libjpeg-turbo" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-36054", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-36054", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-36054" - ], - "description": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-36054", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-36054", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd", - "https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final", - "https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final", - "https://web.mit.edu/kerberos/www/advisories/" - ], - "description": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "krb5", - "version": "1.18.3-6+deb11u3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-36054" - } - } - ], - "artifact": { - "id": "eee18a8d6a6e2c05", - "name": "libk5crypto3", - "version": "1.18.3-6+deb11u3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libk5crypto3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libk5crypto3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6+deb11u3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11", - "upstreams": [ - { - "name": "krb5" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2018-5709", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2018-5709", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2018-5709" - ], - "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2018-5709", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2018-5709", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "krb5", - "version": "1.18.3-6+deb11u3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2018-5709" - } - } - ], - "artifact": { - "id": "eee18a8d6a6e2c05", - "name": "libk5crypto3", - "version": "1.18.3-6+deb11u3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libk5crypto3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libk5crypto3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6+deb11u3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libk5crypto3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11", - "upstreams": [ - { - "name": "krb5" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-36054", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-36054", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-36054" - ], - "description": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-36054", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-36054", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd", - "https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final", - "https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final", - "https://web.mit.edu/kerberos/www/advisories/" - ], - "description": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "krb5", - "version": "1.18.3-6+deb11u3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-36054" - } - } - ], - "artifact": { - "id": "d8d66570c5b54080", - "name": "libkrb5-3", - "version": "1.18.3-6+deb11u3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libkrb5-3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libkrb5-3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5-3:libkrb5_3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5_3:libkrb5-3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5_3:libkrb5_3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5:libkrb5-3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5:libkrb5_3:1.18.3-6+deb11u3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11", - "upstreams": [ - { - "name": "krb5" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2018-5709", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2018-5709", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2018-5709" - ], - "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2018-5709", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2018-5709", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "krb5", - "version": "1.18.3-6+deb11u3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2018-5709" - } - } - ], - "artifact": { - "id": "d8d66570c5b54080", - "name": "libkrb5-3", - "version": "1.18.3-6+deb11u3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libkrb5-3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libkrb5-3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5-3:libkrb5_3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5_3:libkrb5-3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5_3:libkrb5_3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5:libkrb5-3:1.18.3-6+deb11u3:*:*:*:*:*:*:*", - "cpe:2.3:a:libkrb5:libkrb5_3:1.18.3-6+deb11u3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libkrb5-3@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11", - "upstreams": [ - { - "name": "krb5" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-36054", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-36054", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-36054" - ], - "description": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-36054", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-36054", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd", - "https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final", - "https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final", - "https://web.mit.edu/kerberos/www/advisories/" - ], - "description": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "krb5", - "version": "1.18.3-6+deb11u3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-36054" - } - } - ], - "artifact": { - "id": "b7f88754be28592f", - "name": "libkrb5support0", - "version": "1.18.3-6+deb11u3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libkrb5support0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libkrb5support0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6+deb11u3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11", - "upstreams": [ - { - "name": "krb5" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2018-5709", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2018-5709", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2018-5709" - ], - "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2018-5709", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2018-5709", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable \"dbentry->n_key_data\" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a \"u4\" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "krb5", - "version": "1.18.3-6+deb11u3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2018-5709" - } - } - ], - "artifact": { - "id": "b7f88754be28592f", - "name": "libkrb5support0", - "version": "1.18.3-6+deb11u3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libkrb5support0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libkrb5support0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6+deb11u3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libkrb5support0@1.18.3-6+deb11u3?arch=amd64&upstream=krb5&distro=debian-11", - "upstreams": [ - { - "name": "krb5" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-2953", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-2953", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-2953" - ], - "description": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-2953", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-2953", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://seclists.org/fulldisclosure/2023/Jul/47", - "http://seclists.org/fulldisclosure/2023/Jul/48", - "http://seclists.org/fulldisclosure/2023/Jul/52", - "https://access.redhat.com/security/cve/CVE-2023-2953", - "https://bugs.openldap.org/show_bug.cgi?id=9904", - "https://security.netapp.com/advisory/ntap-20230703-0005/", - "https://support.apple.com/kb/HT213843", - "https://support.apple.com/kb/HT213844", - "https://support.apple.com/kb/HT213845" - ], - "description": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openldap", - "version": "2.4.57+dfsg-3+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-2953" - } - } - ], - "artifact": { - "id": "796a192b709a2a2b", - "name": "libldap-2.4-2", - "version": "2.4.57+dfsg-3+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libldap-2.4-2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11", - "upstreams": [ - { - "name": "openldap" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2020-15719", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2020-15719", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2020-15719" - ], - "description": "libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2020-15719", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2020-15719", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html", - "http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html", - "https://access.redhat.com/errata/RHBA-2019:3674", - "https://bugs.openldap.org/show_bug.cgi?id=9266", - "https://bugzilla.redhat.com/show_bug.cgi?id=1740070", - "https://kc.mcafee.com/corporate/index?page=content&id=SB10365", - "https://www.oracle.com/security-alerts/cpuapr2022.html" - ], - "description": "libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N", - "metrics": { - "baseScore": 4, - "exploitabilityScore": 4.9, - "impactScore": 4.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", - "metrics": { - "baseScore": 4.2, - "exploitabilityScore": 1.6, - "impactScore": 2.5 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openldap", - "version": "2.4.57+dfsg-3+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2020-15719" - } - } - ], - "artifact": { - "id": "796a192b709a2a2b", - "name": "libldap-2.4-2", - "version": "2.4.57+dfsg-3+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libldap-2.4-2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11", - "upstreams": [ - { - "name": "openldap" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-17740", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-17740", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-17740" - ], - "description": "contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-17740", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-17740", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html", - "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html", - "http://www.openldap.org/its/index.cgi/Incoming?id=8759", - "https://kc.mcafee.com/corporate/index?page=content&id=SB10365", - "https://www.oracle.com/security-alerts/cpuapr2022.html" - ], - "description": "contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openldap", - "version": "2.4.57+dfsg-3+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-17740" - } - } - ], - "artifact": { - "id": "796a192b709a2a2b", - "name": "libldap-2.4-2", - "version": "2.4.57+dfsg-3+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libldap-2.4-2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11", - "upstreams": [ - { - "name": "openldap" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-14159", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-14159", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-14159" - ], - "description": "slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by openldap-initscript.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-14159", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-14159", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openldap.org/its/index.cgi?findid=8703", - "https://www.oracle.com/security-alerts/cpuapr2022.html" - ], - "description": "slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a \"kill `cat /pathname`\" command, as demonstrated by openldap-initscript.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 4.7, - "exploitabilityScore": 1, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openldap", - "version": "2.4.57+dfsg-3+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-14159" - } - } - ], - "artifact": { - "id": "796a192b709a2a2b", - "name": "libldap-2.4-2", - "version": "2.4.57+dfsg-3+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libldap-2.4-2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11", - "upstreams": [ - { - "name": "openldap" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2015-3276", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2015-3276", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2015-3276" - ], - "description": "The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2015-3276", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2015-3276", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://rhn.redhat.com/errata/RHSA-2015-2131.html", - "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html", - "http://www.securitytracker.com/id/1034221", - "https://bugzilla.redhat.com/show_bug.cgi?id=1238322" - ], - "description": "The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openldap", - "version": "2.4.57+dfsg-3+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2015-3276" - } - } - ], - "artifact": { - "id": "796a192b709a2a2b", - "name": "libldap-2.4-2", - "version": "2.4.57+dfsg-3+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libldap-2.4-2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap-2.4-2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libldap:libldap_2.4_2:2.4.57+dfsg-3+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libldap-2.4-2@2.4.57+dfsg-3+deb11u1?arch=amd64&upstream=openldap&distro=debian-11", - "upstreams": [ - { - "name": "openldap" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-0563", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-0563", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-0563" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-0563", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-0563", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u", - "https://security.netapp.com/advisory/ntap-20220331-0002/" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "util-linux", - "version": "2.36.1-8+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-0563" - } - } - ], - "artifact": { - "id": "85192996a27b8c7f", - "name": "libmount1", - "version": "2.36.1-8+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libmount1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libmount1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-2-clause", - "BSD-3-clause", - "BSD-4-clause", - "GPL-2", - "GPL-2+", - "GPL-3", - "GPL-3+", - "LGPL", - "LGPL-2", - "LGPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "LGPL-3", - "LGPL-3+", - "MIT", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libmount1:libmount1:2.36.1-8+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libmount1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11", - "upstreams": [ - { - "name": "util-linux" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-41409", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-41409", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-41409" - ], - "description": "Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-41409", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-41409", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35", - "https://github.com/PCRE2Project/pcre2/issues/141" - ], - "description": "Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "pcre2", - "version": "10.36-2+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-41409" - } - } - ], - "artifact": { - "id": "5d07d7ec308f6bb2", - "name": "libpcre2-8-0", - "version": "10.36-2+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpcre2-8-0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2-8-0:libpcre2_8_0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2_8_0:libpcre2-8-0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2_8_0:libpcre2_8_0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2-8:libpcre2-8-0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2-8:libpcre2_8_0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2_8:libpcre2-8-0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2_8:libpcre2_8_0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2:libpcre2-8-0:10.36-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:libpcre2:libpcre2_8_0:10.36-2+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpcre2-8-0@10.36-2+deb11u1?arch=amd64&upstream=pcre2&distro=debian-11", - "upstreams": [ - { - "name": "pcre2" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2019-20838", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2019-20838", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2019-20838" - ], - "description": "libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2019-20838", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2019-20838", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://seclists.org/fulldisclosure/2020/Dec/32", - "http://seclists.org/fulldisclosure/2021/Feb/14", - "https://bugs.gentoo.org/717920", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E", - "https://support.apple.com/kb/HT211931", - "https://support.apple.com/kb/HT212147", - "https://www.pcre.org/original/changelog.txt" - ], - "description": "libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "pcre3", - "version": "2:8.39-13" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2019-20838" - } - } - ], - "artifact": { - "id": "1c1641a0882b431f", - "name": "libpcre3", - "version": "2:8.39-13", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpcre3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libpcre3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libpcre3:libpcre3:2:8.39-13:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11", - "upstreams": [ - { - "name": "pcre3" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-7246", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-7246", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-7246" - ], - "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-7246", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-7246", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://www.securityfocus.com/bid/97067", - "https://access.redhat.com/errata/RHSA-2018:2486", - "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/", - "https://security.gentoo.org/glsa/201710-25" - ], - "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "pcre3", - "version": "2:8.39-13" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-7246" - } - } - ], - "artifact": { - "id": "1c1641a0882b431f", - "name": "libpcre3", - "version": "2:8.39-13", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpcre3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libpcre3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libpcre3:libpcre3:2:8.39-13:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11", - "upstreams": [ - { - "name": "pcre3" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-7245", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-7245", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-7245" - ], - "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-7245", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-7245", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://www.securityfocus.com/bid/97067", - "https://access.redhat.com/errata/RHSA-2018:2486", - "https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/", - "https://security.gentoo.org/glsa/201710-25" - ], - "description": "Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "pcre3", - "version": "2:8.39-13" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-7245" - } - } - ], - "artifact": { - "id": "1c1641a0882b431f", - "name": "libpcre3", - "version": "2:8.39-13", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpcre3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libpcre3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libpcre3:libpcre3:2:8.39-13:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11", - "upstreams": [ - { - "name": "pcre3" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-16231", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-16231", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-16231" - ], - "description": "** DISPUTED ** In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-16231", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-16231", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://packetstormsecurity.com/files/150897/PCRE-8.41-Buffer-Overflow.html", - "http://seclists.org/fulldisclosure/2018/Dec/33", - "http://www.openwall.com/lists/oss-security/2017/11/01/11", - "http://www.openwall.com/lists/oss-security/2017/11/01/3", - "http://www.openwall.com/lists/oss-security/2017/11/01/7", - "http://www.openwall.com/lists/oss-security/2017/11/01/8", - "http://www.securityfocus.com/bid/101688", - "https://bugs.exim.org/show_bug.cgi?id=2047" - ], - "description": "** DISPUTED ** In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report, noting that there are options that can be used to limit the amount of stack that is used.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 2.1, - "exploitabilityScore": 3.9, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "pcre3", - "version": "2:8.39-13" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-16231" - } - } - ], - "artifact": { - "id": "1c1641a0882b431f", - "name": "libpcre3", - "version": "2:8.39-13", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpcre3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libpcre3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libpcre3:libpcre3:2:8.39-13:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11", - "upstreams": [ - { - "name": "pcre3" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-11164", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-11164", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-11164" - ], - "description": "In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-11164", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-11164", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://openwall.com/lists/oss-security/2017/07/11/3", - "http://www.openwall.com/lists/oss-security/2023/04/11/1", - "http://www.openwall.com/lists/oss-security/2023/04/12/1", - "http://www.securityfocus.com/bid/99575", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 10, - "impactScore": 6.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "pcre3", - "version": "2:8.39-13" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-11164" - } - } - ], - "artifact": { - "id": "1c1641a0882b431f", - "name": "libpcre3", - "version": "2:8.39-13", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpcre3/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libpcre3:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libpcre3:libpcre3:2:8.39-13:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpcre3@2:8.39-13?arch=amd64&upstream=pcre3&distro=debian-11", - "upstreams": [ - { - "name": "pcre3" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2021-4214", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2021-4214", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2021-4214" - ], - "description": "A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2021-4214", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2021-4214", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://access.redhat.com/security/cve/CVE-2021-4214", - "https://bugzilla.redhat.com/show_bug.cgi?id=2043393", - "https://github.com/glennrp/libpng/issues/302", - "https://security-tracker.debian.org/tracker/CVE-2021-4214", - "https://security.netapp.com/advisory/ntap-20221020-0001/" - ], - "description": "A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libpng1.6", - "version": "1.6.37-3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2021-4214" - } - } - ], - "artifact": { - "id": "8ac7ccda954c414f", - "name": "libpng16-16", - "version": "1.6.37-3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpng16-16/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libpng16-16:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Apache-2.0", - "BSD-3-clause", - "BSD-like-with-advertising-clause", - "GPL-2", - "GPL-2+", - "expat", - "libpng" - ], - "cpes": [ - "cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16-16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16_16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16_16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&upstream=libpng1.6&distro=debian-11", - "upstreams": [ - { - "name": "libpng1.6" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2019-6129", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2019-6129", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2019-6129" - ], - "description": "** DISPUTED ** png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated \"I don't think it is libpng's job to free this buffer.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2019-6129", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2019-6129", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/glennrp/libpng/issues/269", - "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html" - ], - "description": "** DISPUTED ** png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated \"I don't think it is libpng's job to free this buffer.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libpng1.6", - "version": "1.6.37-3" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2019-6129" - } - } - ], - "artifact": { - "id": "8ac7ccda954c414f", - "name": "libpng16-16", - "version": "1.6.37-3", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libpng16-16/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libpng16-16:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Apache-2.0", - "BSD-3-clause", - "BSD-like-with-advertising-clause", - "GPL-2", - "GPL-2+", - "expat", - "libpng" - ], - "cpes": [ - "cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16-16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16_16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16_16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*", - "cpe:2.3:a:libpng16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&upstream=libpng1.6&distro=debian-11", - "upstreams": [ - { - "name": "libpng1.6" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2021-36087", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2021-36087", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2021-36087" - ], - "description": "The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2021-36087", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2021-36087", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675", - "https://github.com/SELinuxProject/selinux/commit/340f0eb7f3673e8aacaf0a96cbfcd4d12a405521", - "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-585.yaml", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/", - "https://lore.kernel.org/selinux/CAEN2sdqJKHvDzPnxS-J8grU8fSf32DDtx=kyh84OsCq_Vm+yaQ@mail.gmail.com/T/" - ], - "description": "The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 2.1, - "exploitabilityScore": 3.9, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 1.8, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libsepol", - "version": "3.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2021-36087" - } - } - ], - "artifact": { - "id": "455dae0a07323046", - "name": "libsepol1", - "version": "3.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsepol1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsepol1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL", - "LGPL" - ], - "cpes": [ - "cpe:2.3:a:libsepol1:libsepol1:3.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11", - "upstreams": [ - { - "name": "libsepol" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2021-36086", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2021-36086", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2021-36086" - ], - "description": "The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2021-36086", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2021-36086", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177", - "https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8", - "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/" - ], - "description": "The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 2.1, - "exploitabilityScore": 3.9, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 1.8, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libsepol", - "version": "3.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2021-36086" - } - } - ], - "artifact": { - "id": "455dae0a07323046", - "name": "libsepol1", - "version": "3.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsepol1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsepol1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL", - "LGPL" - ], - "cpes": [ - "cpe:2.3:a:libsepol1:libsepol1:3.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11", - "upstreams": [ - { - "name": "libsepol" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2021-36085", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2021-36085", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2021-36085" - ], - "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2021-36085", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2021-36085", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31124", - "https://github.com/SELinuxProject/selinux/commit/2d35fcc7e9e976a2346b1de20e54f8663e8a6cba", - "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-421.yaml", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/" - ], - "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 2.1, - "exploitabilityScore": 3.9, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 1.8, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libsepol", - "version": "3.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2021-36085" - } - } - ], - "artifact": { - "id": "455dae0a07323046", - "name": "libsepol1", - "version": "3.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsepol1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsepol1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL", - "LGPL" - ], - "cpes": [ - "cpe:2.3:a:libsepol1:libsepol1:3.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11", - "upstreams": [ - { - "name": "libsepol" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2021-36084", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2021-36084", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2021-36084" - ], - "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2021-36084", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2021-36084", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065", - "https://github.com/SELinuxProject/selinux/commit/f34d3d30c8325e4847a6b696fe7a3936a8a361f3", - "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-417.yaml", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/" - ], - "description": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 2.1, - "exploitabilityScore": 3.9, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 1.8, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libsepol", - "version": "3.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2021-36084" - } - } - ], - "artifact": { - "id": "455dae0a07323046", - "name": "libsepol1", - "version": "3.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsepol1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsepol1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL", - "LGPL" - ], - "cpes": [ - "cpe:2.3:a:libsepol1:libsepol1:3.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsepol1@3.1-1?arch=amd64&upstream=libsepol&distro=debian-11", - "upstreams": [ - { - "name": "libsepol" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-0563", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-0563", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-0563" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-0563", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-0563", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u", - "https://security.netapp.com/advisory/ntap-20220331-0002/" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "util-linux", - "version": "2.36.1-8+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-0563" - } - } - ], - "artifact": { - "id": "c38aaebe13ed88d7", - "name": "libsmartcols1", - "version": "2.36.1-8+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsmartcols1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsmartcols1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-2-clause", - "BSD-3-clause", - "BSD-4-clause", - "GPL-2", - "GPL-2+", - "GPL-3", - "GPL-3+", - "LGPL", - "LGPL-2", - "LGPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "LGPL-3", - "LGPL-3+", - "MIT", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libsmartcols1:libsmartcols1:2.36.1-8+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsmartcols1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11", - "upstreams": [ - { - "name": "util-linux" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-1304", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-1304", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-1304" - ], - "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-1304", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-1304", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://bugzilla.redhat.com/show_bug.cgi?id=2069726" - ], - "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "e2fsprogs", - "version": "1.46.2-2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-1304" - } - } - ], - "artifact": { - "id": "4ba13b2c11cb0876", - "name": "libss2", - "version": "1.46.2-2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libss2/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libss2:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libss2:libss2:1.46.2-2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libss2@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11", - "upstreams": [ - { - "name": "e2fsprogs" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2020-22218", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2020-22218", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2020-22218" - ], - "description": "An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2020-22218", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2020-22218", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/libssh2/libssh2/pull/476" - ], - "description": "An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libssh2", - "version": "1.9.0-2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2020-22218" - } - } - ], - "artifact": { - "id": "4228335ce25053eb", - "name": "libssh2-1", - "version": "1.9.0-2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssh2-1/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libssh2-1:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD3" - ], - "cpes": [ - "cpe:2.3:a:libssh2-1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*", - "cpe:2.3:a:libssh2-1:libssh2_1:1.9.0-2:*:*:*:*:*:*:*", - "cpe:2.3:a:libssh2_1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*", - "cpe:2.3:a:libssh2_1:libssh2_1:1.9.0-2:*:*:*:*:*:*:*", - "cpe:2.3:a:libssh2:libssh2-1:1.9.0-2:*:*:*:*:*:*:*", - "cpe:2.3:a:libssh2:libssh2_1:1.9.0-2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&upstream=libssh2&distro=debian-11", - "upstreams": [ - { - "name": "libssh2" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-0464", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-0464", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-0464" - ], - "description": "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-0464", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-0464", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230322.txt" - ], - "description": "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-0464" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3817", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3817", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3817" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3817", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3817", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://seclists.org/fulldisclosure/2023/Jul/43", - "http://www.openwall.com/lists/oss-security/2023/07/31/1", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5", - "https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html", - "https://security.netapp.com/advisory/ntap-20230818-0014/", - "https://www.openssl.org/news/secadv/20230731.txt" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-3817" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3446", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3446", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3446" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3446", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3446", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openwall.com/lists/oss-security/2023/07/19/4", - "http://www.openwall.com/lists/oss-security/2023/07/19/5", - "http://www.openwall.com/lists/oss-security/2023/07/19/6", - "http://www.openwall.com/lists/oss-security/2023/07/31/1", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23", - "https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html", - "https://security.netapp.com/advisory/ntap-20230803-0011/", - "https://www.openssl.org/news/secadv/20230719.txt" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-3446" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-2650", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-2650", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-2650" - ], - "description": "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit. OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime. The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced. This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL. If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS. It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain. Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates. This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-2650", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-2650", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openwall.com/lists/oss-security/2023/05/30/1", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009", - "https://security.netapp.com/advisory/ntap-20230703-0001/", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230530.txt" - ], - "description": "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit. OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime. The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced. This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL. If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS. It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain. Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates. This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-2650" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-0466", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-0466", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-0466" - ], - "description": "The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-0466", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-0466", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://security.netapp.com/advisory/ntap-20230414-0001/", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230328.txt" - ], - "description": "The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-0466" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-0465", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-0465", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-0465" - ], - "description": "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-0465", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-0465", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://security.netapp.com/advisory/ntap-20230414-0001/", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230328.txt" - ], - "description": "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-0465" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2010-0928", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2010-0928", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2010-0928" - ], - "description": "OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a \"fault-based attack.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2010-0928", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2010-0928", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/", - "http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf", - "http://www.networkworld.com/news/2010/030410-rsa-security-attack.html", - "http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/", - "https://exchange.xforce.ibmcloud.com/vulnerabilities/56750" - ], - "description": "OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a \"fault-based attack.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:H/Au:N/C:C/I:N/A:N", - "metrics": { - "baseScore": 4, - "exploitabilityScore": 1.9, - "impactScore": 6.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2010-0928" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2007-6755", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2007-6755", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2007-6755" - ], - "description": "The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain \"skeleton key\" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2007-6755", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2007-6755", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/", - "http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html", - "http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html", - "http://rump2007.cr.yp.to/15-shumow.pdf", - "http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/", - "http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect", - "http://www.securityfocus.com/bid/63657", - "https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html" - ], - "description": "The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain \"skeleton key\" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N", - "metrics": { - "baseScore": 5.8, - "exploitabilityScore": 8.6, - "impactScore": 4.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2007-6755" - } - } - ], - "artifact": { - "id": "63a11d0164944054", - "name": "libssl1.1", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libssl1.1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libssl1.1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libssl1.1@1.1.1n-0+deb11u4?arch=amd64&upstream=openssl&distro=debian-11", - "upstreams": [ - { - "name": "openssl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31439", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31439", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31439" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31439", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31439", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/kastel-security/Journald", - "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf", - "https://github.com/systemd/systemd/releases" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31439" - } - } - ], - "artifact": { - "id": "4a1aa34abd06cc6c", - "name": "libsystemd0", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsystemd0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsystemd0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31438", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31438", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31438" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31438", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31438", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/kastel-security/Journald", - "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf", - "https://github.com/systemd/systemd/releases" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31438" - } - } - ], - "artifact": { - "id": "4a1aa34abd06cc6c", - "name": "libsystemd0", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsystemd0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsystemd0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31437", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31437", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31437" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31437", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31437", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/kastel-security/Journald", - "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf", - "https://github.com/systemd/systemd/releases" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31437" - } - } - ], - "artifact": { - "id": "4a1aa34abd06cc6c", - "name": "libsystemd0", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsystemd0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsystemd0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2020-13529", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2020-13529", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2020-13529" - ], - "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2020-13529", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2020-13529", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openwall.com/lists/oss-security/2021/08/04/2", - "http://www.openwall.com/lists/oss-security/2021/08/17/3", - "http://www.openwall.com/lists/oss-security/2021/09/07/3", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/", - "https://security.gentoo.org/glsa/202107-48", - "https://security.netapp.com/advisory/ntap-20210625-0005/", - "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142" - ], - "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:A/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 2.9, - "exploitabilityScore": 5.5, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "talos-cna@cisco.com", - "type": "Secondary", - "version": "3.0", - "vector": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.1, - "exploitabilityScore": 1.6, - "impactScore": 4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.1, - "exploitabilityScore": 1.6, - "impactScore": 4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2020-13529" - } - } - ], - "artifact": { - "id": "4a1aa34abd06cc6c", - "name": "libsystemd0", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsystemd0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsystemd0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2013-4392", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2013-4392", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2013-4392" - ], - "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2013-4392", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2013-4392", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357", - "http://www.openwall.com/lists/oss-security/2013/10/01/9", - "https://bugzilla.redhat.com/show_bug.cgi?id=859060" - ], - "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:P/A:N", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 3.4, - "impactScore": 4.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2013-4392" - } - } - ], - "artifact": { - "id": "4a1aa34abd06cc6c", - "name": "libsystemd0", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libsystemd0/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libsystemd0:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libsystemd0:libsystemd0:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libsystemd0@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3618", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3618", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3618" - ], - "description": "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3618", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3618", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://access.redhat.com/security/cve/CVE-2023-3618", - "https://bugzilla.redhat.com/show_bug.cgi?id=2215865", - "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html", - "https://security.netapp.com/advisory/ntap-20230824-0012/" - ], - "description": "A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - }, - { - "source": "secalert@redhat.com", - "type": "Secondary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-3618" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3316", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3316", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3316" - ], - "description": "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.\n\n", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3316", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3316", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/libtiff/libtiff/-/issues/515", - "https://gitlab.com/libtiff/libtiff/-/merge_requests/468", - "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html", - "https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/" - ], - "description": "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.\n\n", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - }, - { - "source": "reefs@jfrog.com", - "type": "Secondary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.9, - "exploitabilityScore": 2.2, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-3316" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-2908", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-2908", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-2908" - ], - "description": "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-2908", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-2908", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://access.redhat.com/security/cve/CVE-2023-2908", - "https://bugzilla.redhat.com/show_bug.cgi?id=2218830", - "https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f", - "https://gitlab.com/libtiff/libtiff/-/merge_requests/479", - "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html", - "https://security.netapp.com/advisory/ntap-20230731-0004/" - ], - "description": "A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - }, - { - "source": "secalert@redhat.com", - "type": "Secondary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-2908" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-26966", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-26966", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-26966" - ], - "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-26966", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-26966", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/libtiff/libtiff/-/issues/530", - "https://gitlab.com/libtiff/libtiff/-/merge_requests/473", - "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html" - ], - "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-26966" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-26965", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-26965", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-26965" - ], - "description": "loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-26965", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-26965", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/libtiff/libtiff/-/merge_requests/472", - "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html", - "https://security.netapp.com/advisory/ntap-20230706-0009/" - ], - "description": "loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-26965" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-25433", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-25433", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-25433" - ], - "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-25433", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-25433", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/libtiff/libtiff/-/issues/520", - "https://gitlab.com/libtiff/libtiff/-/merge_requests/467", - "https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html" - ], - "description": "libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-25433" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-40090", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-40090", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-40090" - ], - "description": "An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-40090", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-40090", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/libtiff/libtiff/-/issues/455", - "https://gitlab.com/libtiff/libtiff/-/merge_requests/386" - ], - "description": "An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-40090" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3164", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3164", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3164" - ], - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-3164" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-30775", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-30775", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-30775" - ], - "description": "A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-30775", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-30775", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://access.redhat.com/security/cve/CVE-2023-30775", - "https://bugzilla.redhat.com/show_bug.cgi?id=2187141", - "https://gitlab.com/libtiff/libtiff/-/issues/464", - "https://security.netapp.com/advisory/ntap-20230703-0002/" - ], - "description": "A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-30775" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-1916", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-1916", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-1916" - ], - "description": "A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-1916", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-1916", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/libtiff/libtiff/-/issues/536", - "https://gitlab.com/libtiff/libtiff/-/issues/536,", - "https://gitlab.com/libtiff/libtiff/-/issues/537" - ], - "description": "A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", - "metrics": { - "baseScore": 6.1, - "exploitabilityScore": 1.8, - "impactScore": 4.2 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-1916" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-1210", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-1210", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-1210" - ], - "description": "A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-1210", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-1210", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/libtiff/libtiff/-/issues/402", - "https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiff", - "https://security.gentoo.org/glsa/202210-10", - "https://security.netapp.com/advisory/ntap-20220513-0005/", - "https://vuldb.com/?id.196363" - ], - "description": "A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - }, - { - "source": "cna@vuldb.com", - "type": "Secondary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 2.8, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-1210" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-1056", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-1056", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-1056" - ], - "description": "Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-1056", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-1056", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.json", - "https://gitlab.com/libtiff/libtiff/-/issues/391", - "https://gitlab.com/libtiff/libtiff/-/merge_requests/307", - "https://security.gentoo.org/glsa/202210-10", - "https://security.netapp.com/advisory/ntap-20221228-0008/" - ], - "description": "Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - }, - { - "source": "cve@gitlab.com", - "type": "Secondary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-1056" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2018-10126", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2018-10126", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2018-10126" - ], - "description": "LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2018-10126", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2018-10126", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://bugzilla.maptools.org/show_bug.cgi?id=2786", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E" - ], - "description": "LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 4.3, - "exploitabilityScore": 8.6, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2018-10126" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-9117", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-9117", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-9117" - ], - "description": "In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-9117", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-9117", - "namespace": "nvd:cpe", - "severity": "Critical", - "urls": [ - "http://bugzilla.maptools.org/show_bug.cgi?id=2690", - "http://www.securityfocus.com/bid/98581", - "https://usn.ubuntu.com/3606-1/" - ], - "description": "In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 10, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 9.8, - "exploitabilityScore": 3.9, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-9117" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-5563", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-5563", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-5563" - ], - "description": "LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-5563", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-5563", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://bugzilla.maptools.org/show_bug.cgi?id=2664", - "http://www.securityfocus.com/bid/95705", - "https://security.gentoo.org/glsa/201709-27", - "https://usn.ubuntu.com/3606-1/" - ], - "description": "LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 8.8, - "exploitabilityScore": 2.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-5563" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-17973", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-17973", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-17973" - ], - "description": "** DISPUTED ** In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reproduce this issue.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-17973", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-17973", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://bugzilla.maptools.org/show_bug.cgi?id=2769", - "http://www.securityfocus.com/bid/102331", - "https://bugzilla.novell.com/show_bug.cgi?id=1074318", - "https://bugzilla.redhat.com/show_bug.cgi?id=1530912" - ], - "description": "** DISPUTED ** In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reproduce this issue.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 8.8, - "exploitabilityScore": 2.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-17973" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2017-16232", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2017-16232", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2017-16232" - ], - "description": "** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2017-16232", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2017-16232", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html", - "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html", - "http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html", - "http://seclists.org/fulldisclosure/2018/Dec/32", - "http://seclists.org/fulldisclosure/2018/Dec/47", - "http://www.openwall.com/lists/oss-security/2017/11/01/11", - "http://www.openwall.com/lists/oss-security/2017/11/01/3", - "http://www.openwall.com/lists/oss-security/2017/11/01/7", - "http://www.openwall.com/lists/oss-security/2017/11/01/8", - "http://www.securityfocus.com/bid/101696" - ], - "description": "** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2017-16232" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-41175", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-41175", - "namespace": "debian:distro:debian:11", - "severity": "Unknown", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-41175" - ], - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-41175" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-40745", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-40745", - "namespace": "debian:distro:debian:11", - "severity": "Unknown", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-40745" - ], - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tiff", - "version": "4.2.0-1+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-40745" - } - } - ], - "artifact": { - "id": "02a94248cc826034", - "name": "libtiff5", - "version": "4.2.0-1+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtiff5/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libtiff5:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Hylafax" - ], - "cpes": [ - "cpe:2.3:a:libtiff5:libtiff5:4.2.0-1+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtiff5@4.2.0-1+deb11u4?arch=amd64&upstream=tiff&distro=debian-11", - "upstreams": [ - { - "name": "tiff" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-29491", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-29491", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-29491" - ], - "description": "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-29491", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-29491", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56", - "http://www.openwall.com/lists/oss-security/2023/04/19/10", - "http://www.openwall.com/lists/oss-security/2023/04/19/11", - "https://security.netapp.com/advisory/ntap-20230517-0009/", - "https://www.openwall.com/lists/oss-security/2023/04/12/5", - "https://www.openwall.com/lists/oss-security/2023/04/13/4" - ], - "description": "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "ncurses", - "version": "6.2+20201114-2+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-29491" - } - } - ], - "artifact": { - "id": "0e5503f23b30595d", - "name": "libtinfo6", - "version": "6.2+20201114-2+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libtinfo6/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libtinfo6:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-3-clause", - "MIT/X11", - "X11" - ], - "cpes": [ - "cpe:2.3:a:libtinfo6:libtinfo6:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libtinfo6@6.2+20201114-2+deb11u1?arch=amd64&upstream=ncurses&distro=debian-11", - "upstreams": [ - { - "name": "ncurses" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31439", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31439", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31439" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31439", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31439", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/kastel-security/Journald", - "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf", - "https://github.com/systemd/systemd/releases" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31439" - } - } - ], - "artifact": { - "id": "e91f946b23d08cc9", - "name": "libudev1", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libudev1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libudev1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libudev1:libudev1:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31438", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31438", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31438" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31438", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31438", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/kastel-security/Journald", - "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf", - "https://github.com/systemd/systemd/releases" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31438" - } - } - ], - "artifact": { - "id": "e91f946b23d08cc9", - "name": "libudev1", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libudev1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libudev1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libudev1:libudev1:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31437", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31437", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31437" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31437", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31437", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/kastel-security/Journald", - "https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf", - "https://github.com/systemd/systemd/releases" - ], - "description": "** DISPUTED ** An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31437" - } - } - ], - "artifact": { - "id": "e91f946b23d08cc9", - "name": "libudev1", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libudev1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libudev1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libudev1:libudev1:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2020-13529", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2020-13529", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2020-13529" - ], - "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2020-13529", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2020-13529", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openwall.com/lists/oss-security/2021/08/04/2", - "http://www.openwall.com/lists/oss-security/2021/08/17/3", - "http://www.openwall.com/lists/oss-security/2021/09/07/3", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/", - "https://security.gentoo.org/glsa/202107-48", - "https://security.netapp.com/advisory/ntap-20210625-0005/", - "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142" - ], - "description": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:A/AC:M/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 2.9, - "exploitabilityScore": 5.5, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "talos-cna@cisco.com", - "type": "Secondary", - "version": "3.0", - "vector": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.1, - "exploitabilityScore": 1.6, - "impactScore": 4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.1, - "exploitabilityScore": 1.6, - "impactScore": 4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2020-13529" - } - } - ], - "artifact": { - "id": "e91f946b23d08cc9", - "name": "libudev1", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libudev1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libudev1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libudev1:libudev1:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2013-4392", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2013-4392", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2013-4392" - ], - "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2013-4392", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2013-4392", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357", - "http://www.openwall.com/lists/oss-security/2013/10/01/9", - "https://bugzilla.redhat.com/show_bug.cgi?id=859060" - ], - "description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:P/A:N", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 3.4, - "impactScore": 4.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "systemd", - "version": "247.3-7+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2013-4392" - } - } - ], - "artifact": { - "id": "e91f946b23d08cc9", - "name": "libudev1", - "version": "247.3-7+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libudev1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libudev1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "CC0-1.0", - "Expat", - "GPL-2", - "GPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libudev1:libudev1:247.3-7+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libudev1@247.3-7+deb11u2?arch=amd64&upstream=systemd&distro=debian-11", - "upstreams": [ - { - "name": "systemd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-0563", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-0563", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-0563" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-0563", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-0563", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u", - "https://security.netapp.com/advisory/ntap-20220331-0002/" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "util-linux", - "version": "2.36.1-8+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-0563" - } - } - ], - "artifact": { - "id": "a183ab0912a52954", - "name": "libuuid1", - "version": "2.36.1-8+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libuuid1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libuuid1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-2-clause", - "BSD-3-clause", - "BSD-4-clause", - "GPL-2", - "GPL-2+", - "GPL-3", - "GPL-3+", - "LGPL", - "LGPL-2", - "LGPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "LGPL-3", - "LGPL-3+", - "MIT", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:libuuid1:libuuid1:2.36.1-8+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libuuid1@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11", - "upstreams": [ - { - "name": "util-linux" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3138", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3138", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3138" - ], - "description": "A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.", - "cvss": [], - "fix": { - "versions": [ - "2:1.7.2-1+deb11u1" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5433-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5433-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3138", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3138", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://access.redhat.com/security/cve/CVE-2023-3138", - "https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/304a654a0d57bf0f00d8998185f0360332cfa36c", - "https://lists.x.org/archives/xorg-announce/2023-June/003406.html", - "https://lists.x.org/archives/xorg-announce/2023-June/003407.html" - ], - "description": "A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libx11", - "version": "2:1.7.2-1" - } - }, - "found": { - "versionConstraint": "< 2:1.7.2-1+deb11u1 (deb)", - "vulnerabilityID": "CVE-2023-3138" - } - } - ], - "artifact": { - "id": "ce4e2010925a4939", - "name": "libx11-6", - "version": "2:1.7.2-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libx11-6/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libx11-6:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libx11-6:libx11-6:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11-6:libx11_6:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11_6:libx11-6:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11_6:libx11_6:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11:libx11-6:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11:libx11_6:2:1.7.2-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libx11-6@2:1.7.2-1?arch=amd64&upstream=libx11&distro=debian-11", - "upstreams": [ - { - "name": "libx11" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3138", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3138", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3138" - ], - "description": "A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.", - "cvss": [], - "fix": { - "versions": [ - "2:1.7.2-1+deb11u1" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5433-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5433-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3138", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3138", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://access.redhat.com/security/cve/CVE-2023-3138", - "https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/304a654a0d57bf0f00d8998185f0360332cfa36c", - "https://lists.x.org/archives/xorg-announce/2023-June/003406.html", - "https://lists.x.org/archives/xorg-announce/2023-June/003407.html" - ], - "description": "A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libx11", - "version": "2:1.7.2-1" - } - }, - "found": { - "versionConstraint": "< 2:1.7.2-1+deb11u1 (deb)", - "vulnerabilityID": "CVE-2023-3138" - } - } - ], - "artifact": { - "id": "8defa9b2d11078dc", - "name": "libx11-data", - "version": "2:1.7.2-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libx11-data/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libx11-data.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libx11-data:libx11-data:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11-data:libx11_data:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11_data:libx11-data:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11_data:libx11_data:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11:libx11-data:2:1.7.2-1:*:*:*:*:*:*:*", - "cpe:2.3:a:libx11:libx11_data:2:1.7.2-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libx11-data@2:1.7.2-1?arch=all&upstream=libx11&distro=debian-11", - "upstreams": [ - { - "name": "libx11" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-2309", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-2309", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-2309" - ], - "description": "NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the application. The vulnerability is caused by the iterwalk function (also used by the canonicalize function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-2309", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-2309", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f", - "https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ/", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO/", - "https://security.gentoo.org/glsa/202208-06", - "https://security.netapp.com/advisory/ntap-20220915-0006/" - ], - "description": "NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the application. The vulnerability is caused by the iterwalk function (also used by the canonicalize function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "security@huntr.dev", - "type": "Secondary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libxml2", - "version": "2.9.10+dfsg-6.7+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-2309" - } - } - ], - "artifact": { - "id": "cfab8ee0ffb19913", - "name": "libxml2", - "version": "2.9.10+dfsg-6.7+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libxml2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libxml2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "ISC", - "MIT-1" - ], - "cpes": [ - "cpe:2.3:a:libxml2:libxml2:2.9.10+dfsg-6.7+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libxml2@2.9.10+dfsg-6.7+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-39615", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-39615", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-39615" - ], - "description": "Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-39615", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-39615", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://gitlab.gnome.org/GNOME/libxml2/-/issues/535" - ], - "description": "Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libxml2", - "version": "2.9.10+dfsg-6.7+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-39615" - } - } - ], - "artifact": { - "id": "cfab8ee0ffb19913", - "name": "libxml2", - "version": "2.9.10+dfsg-6.7+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libxml2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libxml2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "ISC", - "MIT-1" - ], - "cpes": [ - "cpe:2.3:a:libxml2:libxml2:2.9.10+dfsg-6.7+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libxml2@2.9.10+dfsg-6.7+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2016-3709", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2016-3709", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2016-3709" - ], - "description": "Possible cross-site scripting vulnerability in libxml after commit 960f0e2.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2016-3709", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2016-3709", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://mail.gnome.org/archives/xml/2018-January/msg00010.html" - ], - "description": "Possible cross-site scripting vulnerability in libxml after commit 960f0e2.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", - "metrics": { - "baseScore": 6.1, - "exploitabilityScore": 2.8, - "impactScore": 2.7 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libxml2", - "version": "2.9.10+dfsg-6.7+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2016-3709" - } - } - ], - "artifact": { - "id": "cfab8ee0ffb19913", - "name": "libxml2", - "version": "2.9.10+dfsg-6.7+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libxml2/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libxml2:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "ISC", - "MIT-1" - ], - "cpes": [ - "cpe:2.3:a:libxml2:libxml2:2.9.10+dfsg-6.7+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libxml2@2.9.10+dfsg-6.7+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2015-9019", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2015-9019", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2015-9019" - ], - "description": "In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2015-9019", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2015-9019", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://bugzilla.gnome.org/show_bug.cgi?id=758400", - "https://bugzilla.suse.com/show_bug.cgi?id=934119" - ], - "description": "In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.0", - "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libxslt", - "version": "1.1.34-4+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2015-9019" - } - } - ], - "artifact": { - "id": "ee58630377288c70", - "name": "libxslt1.1", - "version": "1.1.34-4+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libxslt1.1/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/libxslt1.1:amd64.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:libxslt1.1:libxslt1.1:1.1.34-4+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libxslt1.1@1.1.34-4+deb11u1?arch=amd64&upstream=libxslt&distro=debian-11", - "upstreams": [ - { - "name": "libxslt" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-4899", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-4899", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-4899" - ], - "description": "A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-4899", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-4899", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://github.com/facebook/zstd/issues/3200", - "https://security.netapp.com/advisory/ntap-20230725-0005/" - ], - "description": "A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "libzstd", - "version": "1.4.8+dfsg-2.1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-4899" - } - } - ], - "artifact": { - "id": "156fff5a33a4d4c0", - "name": "libzstd1", - "version": "1.4.8+dfsg-2.1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/libzstd1/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/libzstd1:amd64.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-3-clause", - "Expat", - "GPL-2", - "zlib" - ], - "cpes": [ - "cpe:2.3:a:libzstd1:libzstd1:1.4.8+dfsg-2.1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/libzstd1@1.4.8+dfsg-2.1?arch=amd64&upstream=libzstd&distro=debian-11", - "upstreams": [ - { - "name": "libzstd" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-29383", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-29383", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-29383" - ], - "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-29383", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-29383", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d", - "https://github.com/shadow-maint/shadow/pull/687", - "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/", - "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797" - ], - "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 1.8, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-29383" - } - } - ], - "artifact": { - "id": "8aa12b8095f6746e", - "name": "login", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/login/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:login:login:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2019-19882", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2019-19882", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2019-19882" - ], - "description": "shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing --disable-account-tools-setuid, and without a PAM configuration suitable for use with setuid account management tools. This combination leads to account management tools (groupadd, groupdel, groupmod, useradd, userdel, usermod) that can easily be used by unprivileged local users to escalate privileges to root in multiple ways. This issue became much more relevant in approximately December 2019 when an unrelated bug was fixed (i.e., the chmod calls to suidusbins were fixed in the upstream Makefile which is now included in the release version 4.8).", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2019-19882", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2019-19882", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://bugs.archlinux.org/task/64836", - "https://bugs.gentoo.org/702252", - "https://github.com/shadow-maint/shadow/commit/edf7547ad5aa650be868cf2dac58944773c12d75", - "https://github.com/shadow-maint/shadow/pull/199", - "https://github.com/void-linux/void-packages/pull/17580", - "https://security.gentoo.org/glsa/202008-09" - ], - "description": "shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing --disable-account-tools-setuid, and without a PAM configuration suitable for use with setuid account management tools. This combination leads to account management tools (groupadd, groupdel, groupmod, useradd, userdel, usermod) that can easily be used by unprivileged local users to escalate privileges to root in multiple ways. This issue became much more relevant in approximately December 2019 when an unrelated bug was fixed (i.e., the chmod calls to suidusbins were fixed in the upstream Makefile which is now included in the release version 4.8).", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C", - "metrics": { - "baseScore": 6.9, - "exploitabilityScore": 3.4, - "impactScore": 10 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2019-19882" - } - } - ], - "artifact": { - "id": "8aa12b8095f6746e", - "name": "login", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/login/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:login:login:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2013-4235", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2013-4235", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2013-4235" - ], - "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2013-4235", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2013-4235", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://access.redhat.com/security/cve/cve-2013-4235", - "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E", - "https://security-tracker.debian.org/tracker/CVE-2013-4235", - "https://security.gentoo.org/glsa/202210-26" - ], - "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:N/I:P/A:P", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 3.4, - "impactScore": 4.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 4.7, - "exploitabilityScore": 1, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2013-4235" - } - } - ], - "artifact": { - "id": "8aa12b8095f6746e", - "name": "login", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/login/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:login:login:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2007-5686", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2007-5686", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2007-5686" - ], - "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2007-5686", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2007-5686", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.securityfocus.com/archive/1/482129/100/100/threaded", - "http://www.securityfocus.com/archive/1/482857/100/0/threaded", - "http://www.securityfocus.com/bid/26048", - "http://www.vupen.com/english/advisories/2007/3474", - "https://issues.rpath.com/browse/RPL-1825" - ], - "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:C/I:N/A:N", - "metrics": { - "baseScore": 4.9, - "exploitabilityScore": 3.9, - "impactScore": 6.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2007-5686" - } - } - ], - "artifact": { - "id": "8aa12b8095f6746e", - "name": "login", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/login/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/login.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:login:login:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/login@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-1304", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-1304", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-1304" - ], - "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-1304", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-1304", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://bugzilla.redhat.com/show_bug.cgi?id=2069726" - ], - "description": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "e2fsprogs", - "version": "1.46.2-2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-1304" - } - } - ], - "artifact": { - "id": "9ac5cde115b8b055", - "name": "logsave", - "version": "1.46.2-2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/logsave/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/logsave.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2", - "LGPL-2" - ], - "cpes": [ - "cpe:2.3:a:logsave:logsave:1.46.2-2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/logsave@1.46.2-2?arch=amd64&upstream=e2fsprogs&distro=debian-11", - "upstreams": [ - { - "name": "e2fsprogs" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-0563", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-0563", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-0563" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-0563", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-0563", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u", - "https://security.netapp.com/advisory/ntap-20220331-0002/" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "util-linux", - "version": "2.36.1-8+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-0563" - } - } - ], - "artifact": { - "id": "6dad3fb630fad4a6", - "name": "mount", - "version": "2.36.1-8+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/mount/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/mount.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-2-clause", - "BSD-3-clause", - "BSD-4-clause", - "GPL-2", - "GPL-2+", - "GPL-3", - "GPL-3+", - "LGPL", - "LGPL-2", - "LGPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "LGPL-3", - "LGPL-3+", - "MIT", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:mount:mount:2.36.1-8+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/mount@2.36.1-8+deb11u1?arch=amd64&upstream=util-linux&distro=debian-11", - "upstreams": [ - { - "name": "util-linux" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-29491", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-29491", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-29491" - ], - "description": "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-29491", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-29491", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56", - "http://www.openwall.com/lists/oss-security/2023/04/19/10", - "http://www.openwall.com/lists/oss-security/2023/04/19/11", - "https://security.netapp.com/advisory/ntap-20230517-0009/", - "https://www.openwall.com/lists/oss-security/2023/04/12/5", - "https://www.openwall.com/lists/oss-security/2023/04/13/4" - ], - "description": "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "ncurses", - "version": "6.2+20201114-2+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-29491" - } - } - ], - "artifact": { - "id": "9f36c8fafc5de9d6", - "name": "ncurses-base", - "version": "6.2+20201114-2+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/ncurses-base/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/ncurses-base.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/ncurses-base.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-3-clause", - "MIT/X11", - "X11" - ], - "cpes": [ - "cpe:2.3:a:ncurses-base:ncurses-base:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses-base:ncurses_base:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses_base:ncurses-base:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses_base:ncurses_base:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses:ncurses-base:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses:ncurses_base:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/ncurses-base@6.2+20201114-2+deb11u1?arch=all&upstream=ncurses&distro=debian-11", - "upstreams": [ - { - "name": "ncurses" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-29491", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-29491", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-29491" - ], - "description": "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-29491", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-29491", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56", - "http://www.openwall.com/lists/oss-security/2023/04/19/10", - "http://www.openwall.com/lists/oss-security/2023/04/19/11", - "https://security.netapp.com/advisory/ntap-20230517-0009/", - "https://www.openwall.com/lists/oss-security/2023/04/12/5", - "https://www.openwall.com/lists/oss-security/2023/04/13/4" - ], - "description": "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "ncurses", - "version": "6.2+20201114-2+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-29491" - } - } - ], - "artifact": { - "id": "082d6dbda206b0ff", - "name": "ncurses-bin", - "version": "6.2+20201114-2+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/ncurses-bin/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/ncurses-bin.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-3-clause", - "MIT/X11", - "X11" - ], - "cpes": [ - "cpe:2.3:a:ncurses-bin:ncurses-bin:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses-bin:ncurses_bin:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses_bin:ncurses-bin:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses_bin:ncurses_bin:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses:ncurses-bin:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:ncurses:ncurses_bin:6.2+20201114-2+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/ncurses-bin@6.2+20201114-2+deb11u1?arch=amd64&upstream=ncurses&distro=debian-11", - "upstreams": [ - { - "name": "ncurses" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2020-36309", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2020-36309", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2020-36309" - ], - "description": "ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2020-36309", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2020-36309", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://github.com/openresty/lua-nginx-module/compare/v0.10.15...v0.10.16", - "https://github.com/openresty/lua-nginx-module/pull/1654", - "https://news.ycombinator.com/item?id=26712562", - "https://security.netapp.com/advisory/ntap-20210507-0005/" - ], - "description": "ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "nginx", - "version": "1.25.0-1~bullseye" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2020-36309" - } - } - ], - "artifact": { - "id": "5279257dbc7b380a", - "name": "nginx", - "version": "1.25.0-1~bullseye", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/nginx/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/nginx.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/nginx.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:nginx:nginx:1.25.0-1~bullseye:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/nginx@1.25.0-1~bullseye?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2013-0337", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2013-0337", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2013-0337" - ], - "description": "The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2013-0337", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2013-0337", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://security.gentoo.org/glsa/glsa-201310-04.xml", - "http://www.openwall.com/lists/oss-security/2013/02/21/15", - "http://www.openwall.com/lists/oss-security/2013/02/22/1", - "http://www.openwall.com/lists/oss-security/2013/02/24/1" - ], - "description": "The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 10, - "impactScore": 6.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "nginx", - "version": "1.25.0-1~bullseye" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2013-0337" - } - } - ], - "artifact": { - "id": "5279257dbc7b380a", - "name": "nginx", - "version": "1.25.0-1~bullseye", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/nginx/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/nginx.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/nginx.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:nginx:nginx:1.25.0-1~bullseye:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/nginx@1.25.0-1~bullseye?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2009-4487", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2009-4487", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2009-4487" - ], - "description": "nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2009-4487", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2009-4487", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.securityfocus.com/archive/1/508830/100/0/threaded", - "http://www.securityfocus.com/bid/37711", - "http://www.ush.it/team/ush/hack_httpd_escape/adv.txt" - ], - "description": "nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "nginx", - "version": "1.25.0-1~bullseye" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2009-4487" - } - } - ], - "artifact": { - "id": "5279257dbc7b380a", - "name": "nginx", - "version": "1.25.0-1~bullseye", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/nginx/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/nginx.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/nginx.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:nginx:nginx:1.25.0-1~bullseye:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/nginx@1.25.0-1~bullseye?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-0464", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-0464", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-0464" - ], - "description": "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-0464", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-0464", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230322.txt" - ], - "description": "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-0464" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3817", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3817", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3817" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3817", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3817", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://seclists.org/fulldisclosure/2023/Jul/43", - "http://www.openwall.com/lists/oss-security/2023/07/31/1", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5", - "https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html", - "https://security.netapp.com/advisory/ntap-20230818-0014/", - "https://www.openssl.org/news/secadv/20230731.txt" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-3817" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-3446", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-3446", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-3446" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-3446", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-3446", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openwall.com/lists/oss-security/2023/07/19/4", - "http://www.openwall.com/lists/oss-security/2023/07/19/5", - "http://www.openwall.com/lists/oss-security/2023/07/19/6", - "http://www.openwall.com/lists/oss-security/2023/07/31/1", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23", - "https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html", - "https://security.netapp.com/advisory/ntap-20230803-0011/", - "https://www.openssl.org/news/secadv/20230719.txt" - ], - "description": "Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-3446" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-2650", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-2650", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-2650" - ], - "description": "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit. OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime. The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced. This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL. If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS. It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain. Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates. This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-2650", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-2650", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.openwall.com/lists/oss-security/2023/05/30/1", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009", - "https://security.netapp.com/advisory/ntap-20230703-0001/", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230530.txt" - ], - "description": "Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit. OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime. The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced. This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL. If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS. It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain. Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates. This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 6.5, - "exploitabilityScore": 2.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-2650" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-0466", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-0466", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-0466" - ], - "description": "The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-0466", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-0466", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://security.netapp.com/advisory/ntap-20230414-0001/", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230328.txt" - ], - "description": "The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-0466" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-0465", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-0465", - "namespace": "debian:distro:debian:11", - "severity": "Medium", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-0465" - ], - "description": "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [], - "fix": { - "versions": [ - "1.1.1n-0+deb11u5" - ], - "state": "fixed" - }, - "advisories": [ - { - "id": "DSA-5417-1", - "link": "https://security-tracker.debian.org/tracker/DSA-5417-1" - } - ] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-0465", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-0465", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95", - "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c", - "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", - "https://security.netapp.com/advisory/ntap-20230414-0001/", - "https://www.debian.org/security/2023/dsa-5417", - "https://www.openssl.org/news/secadv/20230328.txt" - ], - "description": "Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 5.3, - "exploitabilityScore": 3.9, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "< 1.1.1n-0+deb11u5 (deb)", - "vulnerabilityID": "CVE-2023-0465" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2010-0928", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2010-0928", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2010-0928" - ], - "description": "OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a \"fault-based attack.\"", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2010-0928", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2010-0928", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/", - "http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf", - "http://www.networkworld.com/news/2010/030410-rsa-security-attack.html", - "http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/", - "https://exchange.xforce.ibmcloud.com/vulnerabilities/56750" - ], - "description": "OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a \"fault-based attack.\"", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:H/Au:N/C:C/I:N/A:N", - "metrics": { - "baseScore": 4, - "exploitabilityScore": 1.9, - "impactScore": 6.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2010-0928" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2007-6755", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2007-6755", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2007-6755" - ], - "description": "The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain \"skeleton key\" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2007-6755", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2007-6755", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/", - "http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html", - "http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html", - "http://rump2007.cr.yp.to/15-shumow.pdf", - "http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/", - "http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect", - "http://www.securityfocus.com/bid/63657", - "https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html" - ], - "description": "The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain \"skeleton key\" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N", - "metrics": { - "baseScore": 5.8, - "exploitabilityScore": 8.6, - "impactScore": 4.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "openssl", - "version": "1.1.1n-0+deb11u4" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2007-6755" - } - } - ], - "artifact": { - "id": "a7dc6e66845f14bf", - "name": "openssl", - "version": "1.1.1n-0+deb11u4", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/openssl/copyright", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.conffiles", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/info/openssl.md5sums", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [], - "cpes": [ - "cpe:2.3:a:openssl:openssl:1.1.1n-0+deb11u4:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/openssl@1.1.1n-0+deb11u4?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2023-29383", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-29383", - "namespace": "debian:distro:debian:11", - "severity": "Low", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-29383" - ], - "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-29383", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-29383", - "namespace": "nvd:cpe", - "severity": "Low", - "urls": [ - "https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d", - "https://github.com/shadow-maint/shadow/pull/687", - "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/", - "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797" - ], - "description": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 1.8, - "impactScore": 1.4 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-29383" - } - } - ], - "artifact": { - "id": "c31ea6da71073f40", - "name": "passwd", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/passwd/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:passwd:passwd:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2019-19882", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2019-19882", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2019-19882" - ], - "description": "shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing --disable-account-tools-setuid, and without a PAM configuration suitable for use with setuid account management tools. This combination leads to account management tools (groupadd, groupdel, groupmod, useradd, userdel, usermod) that can easily be used by unprivileged local users to escalate privileges to root in multiple ways. This issue became much more relevant in approximately December 2019 when an unrelated bug was fixed (i.e., the chmod calls to suidusbins were fixed in the upstream Makefile which is now included in the release version 4.8).", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2019-19882", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2019-19882", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "https://bugs.archlinux.org/task/64836", - "https://bugs.gentoo.org/702252", - "https://github.com/shadow-maint/shadow/commit/edf7547ad5aa650be868cf2dac58944773c12d75", - "https://github.com/shadow-maint/shadow/pull/199", - "https://github.com/void-linux/void-packages/pull/17580", - "https://security.gentoo.org/glsa/202008-09" - ], - "description": "shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing --disable-account-tools-setuid, and without a PAM configuration suitable for use with setuid account management tools. This combination leads to account management tools (groupadd, groupdel, groupmod, useradd, userdel, usermod) that can easily be used by unprivileged local users to escalate privileges to root in multiple ways. This issue became much more relevant in approximately December 2019 when an unrelated bug was fixed (i.e., the chmod calls to suidusbins were fixed in the upstream Makefile which is now included in the release version 4.8).", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:C/I:C/A:C", - "metrics": { - "baseScore": 6.9, - "exploitabilityScore": 3.4, - "impactScore": 10 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2019-19882" - } - } - ], - "artifact": { - "id": "c31ea6da71073f40", - "name": "passwd", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/passwd/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:passwd:passwd:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2013-4235", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2013-4235", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2013-4235" - ], - "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2013-4235", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2013-4235", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://access.redhat.com/security/cve/cve-2013-4235", - "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235", - "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E", - "https://security-tracker.debian.org/tracker/CVE-2013-4235", - "https://security.gentoo.org/glsa/202210-26" - ], - "description": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:N/I:P/A:P", - "metrics": { - "baseScore": 3.3, - "exploitabilityScore": 3.4, - "impactScore": 4.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 4.7, - "exploitabilityScore": 1, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2013-4235" - } - } - ], - "artifact": { - "id": "c31ea6da71073f40", - "name": "passwd", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/passwd/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:passwd:passwd:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2007-5686", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2007-5686", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2007-5686" - ], - "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2007-5686", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2007-5686", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "http://www.securityfocus.com/archive/1/482129/100/100/threaded", - "http://www.securityfocus.com/archive/1/482857/100/0/threaded", - "http://www.securityfocus.com/bid/26048", - "http://www.vupen.com/english/advisories/2007/3474", - "https://issues.rpath.com/browse/RPL-1825" - ], - "description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:L/Au:N/C:C/I:N/A:N", - "metrics": { - "baseScore": 4.9, - "exploitabilityScore": 3.9, - "impactScore": 6.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "shadow", - "version": "1:4.8.1-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2007-5686" - } - } - ], - "artifact": { - "id": "c31ea6da71073f40", - "name": "passwd", - "version": "1:4.8.1-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/passwd/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/passwd.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2" - ], - "cpes": [ - "cpe:2.3:a:passwd:passwd:1:4.8.1-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/passwd@1:4.8.1-1?arch=amd64&upstream=shadow&distro=debian-11", - "upstreams": [ - { - "name": "shadow" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31484", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31484", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31484" - ], - "description": "CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31484", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31484", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://www.openwall.com/lists/oss-security/2023/04/29/1", - "http://www.openwall.com/lists/oss-security/2023/05/03/3", - "http://www.openwall.com/lists/oss-security/2023/05/03/5", - "http://www.openwall.com/lists/oss-security/2023/05/07/2", - "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/", - "https://github.com/andk/cpanpm/pull/175", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/", - "https://metacpan.org/dist/CPAN/changes", - "https://www.openwall.com/lists/oss-security/2023/04/18/14" - ], - "description": "CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 8.1, - "exploitabilityScore": 2.2, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "perl", - "version": "5.32.1-4+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31484" - } - } - ], - "artifact": { - "id": "70fee5abfefd1735", - "name": "perl-base", - "version": "5.32.1-4+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/perl-base/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/perl-base.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Artistic", - "Artistic-2", - "Artistic-dist", - "BSD-3-clause", - "BSD-3-clause-GENERIC", - "BSD-3-clause-with-weird-numbering", - "BSD-4-clause-POWERDOG", - "BZIP", - "DONT-CHANGE-THE-GPL", - "Expat", - "GPL-1", - "GPL-1+", - "GPL-2", - "GPL-2+", - "GPL-3+-WITH-BISON-EXCEPTION", - "HSIEH-BSD", - "HSIEH-DERIVATIVE", - "LGPL-2.1", - "REGCOMP", - "REGCOMP,", - "RRA-KEEP-THIS-NOTICE", - "SDBM-PUBLIC-DOMAIN", - "TEXT-TABS", - "Unicode", - "ZLIB" - ], - "cpes": [ - "cpe:2.3:a:perl-base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl-base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11", - "upstreams": [ - { - "name": "perl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2020-16156", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2020-16156", - "namespace": "debian:distro:debian:11", - "severity": "High", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2020-16156" - ], - "description": "CPAN 2.28 allows Signature Verification Bypass.", - "cvss": [], - "fix": { - "versions": [], - "state": "wont-fix" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2020-16156", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2020-16156", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html", - "https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/", - "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/", - "https://metacpan.org/pod/distribution/CPAN/scripts/cpan" - ], - "description": "CPAN 2.28 allows Signature Verification Bypass.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", - "metrics": { - "baseScore": 6.8, - "exploitabilityScore": 8.6, - "impactScore": 6.4 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 7.8, - "exploitabilityScore": 1.8, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "perl", - "version": "5.32.1-4+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2020-16156" - } - } - ], - "artifact": { - "id": "70fee5abfefd1735", - "name": "perl-base", - "version": "5.32.1-4+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/perl-base/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/perl-base.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Artistic", - "Artistic-2", - "Artistic-dist", - "BSD-3-clause", - "BSD-3-clause-GENERIC", - "BSD-3-clause-with-weird-numbering", - "BSD-4-clause-POWERDOG", - "BZIP", - "DONT-CHANGE-THE-GPL", - "Expat", - "GPL-1", - "GPL-1+", - "GPL-2", - "GPL-2+", - "GPL-3+-WITH-BISON-EXCEPTION", - "HSIEH-BSD", - "HSIEH-DERIVATIVE", - "LGPL-2.1", - "REGCOMP", - "REGCOMP,", - "RRA-KEEP-THIS-NOTICE", - "SDBM-PUBLIC-DOMAIN", - "TEXT-TABS", - "Unicode", - "ZLIB" - ], - "cpes": [ - "cpe:2.3:a:perl-base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl-base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11", - "upstreams": [ - { - "name": "perl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2023-31486", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2023-31486", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2023-31486" - ], - "description": "HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2023-31486", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2023-31486", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://www.openwall.com/lists/oss-security/2023/04/29/1", - "http://www.openwall.com/lists/oss-security/2023/05/03/3", - "http://www.openwall.com/lists/oss-security/2023/05/03/5", - "http://www.openwall.com/lists/oss-security/2023/05/07/2", - "https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/", - "https://github.com/chansen/p5-http-tiny/pull/153", - "https://hackeriet.github.io/cpan-http-tiny-overview/", - "https://www.openwall.com/lists/oss-security/2023/04/18/14", - "https://www.openwall.com/lists/oss-security/2023/05/03/4", - "https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/" - ], - "description": "HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", - "metrics": { - "baseScore": 8.1, - "exploitabilityScore": 2.2, - "impactScore": 5.9 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "perl", - "version": "5.32.1-4+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2023-31486" - } - } - ], - "artifact": { - "id": "70fee5abfefd1735", - "name": "perl-base", - "version": "5.32.1-4+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/perl-base/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/perl-base.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Artistic", - "Artistic-2", - "Artistic-dist", - "BSD-3-clause", - "BSD-3-clause-GENERIC", - "BSD-3-clause-with-weird-numbering", - "BSD-4-clause-POWERDOG", - "BZIP", - "DONT-CHANGE-THE-GPL", - "Expat", - "GPL-1", - "GPL-1+", - "GPL-2", - "GPL-2+", - "GPL-3+-WITH-BISON-EXCEPTION", - "HSIEH-BSD", - "HSIEH-DERIVATIVE", - "LGPL-2.1", - "REGCOMP", - "REGCOMP,", - "RRA-KEEP-THIS-NOTICE", - "SDBM-PUBLIC-DOMAIN", - "TEXT-TABS", - "Unicode", - "ZLIB" - ], - "cpes": [ - "cpe:2.3:a:perl-base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl-base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11", - "upstreams": [ - { - "name": "perl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2011-4116", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2011-4116", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2011-4116" - ], - "description": "_is_safe in the File::Temp module for Perl does not properly handle symlinks.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2011-4116", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2011-4116", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://www.openwall.com/lists/oss-security/2011/11/04/2", - "http://www.openwall.com/lists/oss-security/2011/11/04/4", - "https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14", - "https://rt.cpan.org/Public/Bug/Display.html?id=69106", - "https://seclists.org/oss-sec/2011/q4/238" - ], - "description": "_is_safe in the File::Temp module for Perl does not properly handle symlinks.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N", - "metrics": { - "baseScore": 5, - "exploitabilityScore": 10, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", - "metrics": { - "baseScore": 7.5, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-indirect-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "perl", - "version": "5.32.1-4+deb11u2" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2011-4116" - } - } - ], - "artifact": { - "id": "70fee5abfefd1735", - "name": "perl-base", - "version": "5.32.1-4+deb11u2", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/perl-base/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/perl-base.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "Artistic", - "Artistic-2", - "Artistic-dist", - "BSD-3-clause", - "BSD-3-clause-GENERIC", - "BSD-3-clause-with-weird-numbering", - "BSD-4-clause-POWERDOG", - "BZIP", - "DONT-CHANGE-THE-GPL", - "Expat", - "GPL-1", - "GPL-1+", - "GPL-2", - "GPL-2+", - "GPL-3+-WITH-BISON-EXCEPTION", - "HSIEH-BSD", - "HSIEH-DERIVATIVE", - "LGPL-2.1", - "REGCOMP", - "REGCOMP,", - "RRA-KEEP-THIS-NOTICE", - "SDBM-PUBLIC-DOMAIN", - "TEXT-TABS", - "Unicode", - "ZLIB" - ], - "cpes": [ - "cpe:2.3:a:perl-base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl-base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl_base:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl-base:5.32.1-4+deb11u2:*:*:*:*:*:*:*", - "cpe:2.3:a:perl:perl_base:5.32.1-4+deb11u2:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/perl-base@5.32.1-4+deb11u2?arch=amd64&upstream=perl&distro=debian-11", - "upstreams": [ - { - "name": "perl" - } - ] - } - }, - { - "vulnerability": { - "id": "CVE-2022-48303", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-48303", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-48303" - ], - "description": "GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-48303", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-48303", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRY7VEL4AIG3GLIEVCTOXRZNSVYDYYUD/", - "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5VQYCO52Z7GAVCLRYUITN7KXHLRZQS4/", - "https://savannah.gnu.org/bugs/?62387", - "https://savannah.gnu.org/patch/?10307" - ], - "description": "GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tar", - "version": "1.34+dfsg-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-48303" - } - } - ], - "artifact": { - "id": "6cd0f2a416ae6604", - "name": "tar", - "version": "1.34+dfsg-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/tar/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/tar.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2", - "GPL-3" - ], - "cpes": [ - "cpe:2.3:a:tar:tar:1.34+dfsg-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2005-2541", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2005-2541", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2005-2541" - ], - "description": "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2005-2541", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2005-2541", - "namespace": "nvd:cpe", - "severity": "High", - "urls": [ - "http://marc.info/?l=bugtraq&m=112327628230258&w=2", - "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E" - ], - "description": "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C", - "metrics": { - "baseScore": 10, - "exploitabilityScore": 10, - "impactScore": 10 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "tar", - "version": "1.34+dfsg-1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2005-2541" - } - } - ], - "artifact": { - "id": "6cd0f2a416ae6604", - "name": "tar", - "version": "1.34+dfsg-1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/tar/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/tar.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "GPL-2", - "GPL-3" - ], - "cpes": [ - "cpe:2.3:a:tar:tar:1.34+dfsg-1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/tar@1.34+dfsg-1?arch=amd64&distro=debian-11", - "upstreams": [] - } - }, - { - "vulnerability": { - "id": "CVE-2022-0563", - "dataSource": "https://security-tracker.debian.org/tracker/CVE-2022-0563", - "namespace": "debian:distro:debian:11", - "severity": "Negligible", - "urls": [ - "https://security-tracker.debian.org/tracker/CVE-2022-0563" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [], - "fix": { - "versions": [], - "state": "not-fixed" - }, - "advisories": [] - }, - "relatedVulnerabilities": [ - { - "id": "CVE-2022-0563", - "dataSource": "https://nvd.nist.gov/vuln/detail/CVE-2022-0563", - "namespace": "nvd:cpe", - "severity": "Medium", - "urls": [ - "https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u", - "https://security.netapp.com/advisory/ntap-20220331-0002/" - ], - "description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.", - "cvss": [ - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "2.0", - "vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N", - "metrics": { - "baseScore": 1.9, - "exploitabilityScore": 3.4, - "impactScore": 2.9 - }, - "vendorMetadata": {} - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "version": "3.1", - "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", - "metrics": { - "baseScore": 5.5, - "exploitabilityScore": 1.8, - "impactScore": 3.6 - }, - "vendorMetadata": {} - } - ] - } - ], - "matchDetails": [ - { - "type": "exact-direct-match", - "matcher": "dpkg-matcher", - "searchedBy": { - "distro": { - "type": "debian", - "version": "11" - }, - "namespace": "debian:distro:debian:11", - "package": { - "name": "util-linux", - "version": "2.36.1-8+deb11u1" - } - }, - "found": { - "versionConstraint": "none (deb)", - "vulnerabilityID": "CVE-2022-0563" - } - } - ], - "artifact": { - "id": "7a1db5d0da40785c", - "name": "util-linux", - "version": "2.36.1-8+deb11u1", - "type": "deb", - "locations": [ - { - "path": "/usr/share/doc/util-linux/copyright", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/util-linux.conffiles", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/info/util-linux.md5sums", - "layerID": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3" - }, - { - "path": "/var/lib/dpkg/status", - "layerID": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb" - } - ], - "language": "", - "licenses": [ - "BSD-2-clause", - "BSD-3-clause", - "BSD-4-clause", - "GPL-2", - "GPL-2+", - "GPL-3", - "GPL-3+", - "LGPL", - "LGPL-2", - "LGPL-2+", - "LGPL-2.1", - "LGPL-2.1+", - "LGPL-3", - "LGPL-3+", - "MIT", - "public-domain" - ], - "cpes": [ - "cpe:2.3:a:util-linux:util-linux:2.36.1-8+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:util-linux:util_linux:2.36.1-8+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:util_linux:util-linux:2.36.1-8+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:util_linux:util_linux:2.36.1-8+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:util:util-linux:2.36.1-8+deb11u1:*:*:*:*:*:*:*", - "cpe:2.3:a:util:util_linux:2.36.1-8+deb11u1:*:*:*:*:*:*:*" - ], - "purl": "pkg:deb/debian/util-linux@2.36.1-8+deb11u1?arch=amd64&distro=debian-11", - "upstreams": [] - } - } - ], - "source": { - "type": "image", - "target": { - "userInput": "docker.io/library/nginx:latest", - "imageID": "sha256:f9c14fe76d502861ba0939bc3189e642c02e257f06f4c0214b1f8ca329326cda", - "manifestDigest": "sha256:90e3eef0a52039273b4abc0a2debfafdd691db292b5ade57934a12c238a0400f", - "mediaType": "application/vnd.docker.distribution.manifest.v2+json", - "tags": [ - "nginx:latest" - ], - "imageSize": 142536216, - "layers": [ - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:8cbe4b54fa88d8fc0198ea0cc3a5432aea41573e6a0ee26eca8c79f9fbfa40e3", - "size": 80516736 - }, - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:4b8862fe7056d8a3c2c0910eb38ebb8fc08785eaa1f9f53b2043bf7ca8adbafb", - "size": 62008112 - }, - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:e60266289ce4a890aaf52b93228090998e28220aef04f128704141864992dd15", - "size": 1616 - }, - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:7daac92f43be84ad9675f94875c1a00357b975d6c58b11d17104e0a0e04da370", - "size": 2123 - }, - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:5e099cf3f3c83c449b8c062f944ac025c9bf2dd7ec255837c53430021f5a1517", - "size": 3008 - }, - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:4fd83434130318dede62defafcc5853d03dae8636eccfa1b9dcd385d92e3ff19", - "size": 4621 - } - ], - "manifest": "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", - "config": "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", - "repoDigests": [ - "nginx@sha256:af296b188c7b7df99ba960ca614439c99cb7cf252ed7bbc23e90cfda59092305" - ], - "architecture": "amd64", - "os": "linux" - } - }, - "distro": { - "name": "debian", - "version": "11", - "idLike": [] - }, - "descriptor": { - "name": "grype", - "version": "[not provided]", - "db": { - "built": "2023-09-01T01:26:55Z", - "schemaVersion": 5, - "location": "/home/anubhav/.cache/grypedb/5", - "checksum": "sha256:5db8bddae95f375db7186527c7554311e9ddc41e815ef2dbc28dc5d206ef2c7b", - "error": null - }, - "timestamp": "2023-09-01T10:16:39.235963893+05:30" - } -}