39 lines
2.4 KiB
JSON
39 lines
2.4 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-5358",
|
||
"assignerOrgId": "3ff69d7a-14f2-4f67-a097-88dee7810d18",
|
||
"state": "REJECTED",
|
||
"assignerShortName": "glibc",
|
||
"dateReserved": "2026-04-01T17:07:51.437Z",
|
||
"datePublished": "2026-04-20T20:37:23.178Z",
|
||
"dateUpdated": "2026-04-22T13:04:20.656Z",
|
||
"dateRejected": "2026-04-22T13:04:20.656Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "3ff69d7a-14f2-4f67-a097-88dee7810d18",
|
||
"shortName": "glibc",
|
||
"dateUpdated": "2026-04-22T13:04:20.656Z"
|
||
},
|
||
"rejectedReasons": [
|
||
{
|
||
"lang": "en",
|
||
"value": "REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<div><span>REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been </span><span>discovered that no NIS+ client or server was ever released for any </span><span>Linux-based OS distributions and as such this makes the API provisional </span><span>and unused. Secondly it has been discovered that the NIS+ cold start </span><span>cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API </span><span>can only be called with a trusted server from the pre-populated cache. </span><span>The use of a trusted server means no trust boundary is crossed and this </span><span>is therefore considered a normal bug.</span></div><div><span><br></span></div><div><span><br></span></div>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"x_generator": {
|
||
"engine": "Vulnogram 1.0.1"
|
||
}
|
||
}
|
||
}
|
||
} |