2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://git.savannah.gnu.org/gitweb/?p=coreutils.git","defaultStatus":"unaffected","packageName":"coreutils","versions":[{"status":"affected","version":"v9.2"},{"status":"affected","version":"v9.3"},{"status":"affected","version":"v9.4"},{"status":"unaffected","version":"v9.5"}]}],"source":"patrick@puiterwijk.org"},{"affectedData":[{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":"Siemens","versions":[{"lessThan":"V1.1","status":"affected","version":"0","versionType":"custom"}]}],"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gnu:coreutils:9.2:*:*:*:*:*:*:*","matchCriteriaId":"C0979D6D-0274-400D-B70D-59ADECE3513F","vulnerable":true},{"criteria":"cpe:2.3:a:gnu:coreutils:9.3:*:*:*:*:*:*:*","matchCriteriaId":"1356B62D-5021-4994-BE95-B0565E51571B","vulnerable":true},{"criteria":"cpe:2.3:a:gnu:coreutils:9.4:*:*:*:*:*:*:*","matchCriteriaId":"4F6E3D4F-1B74-4C0C-BE0B-A6FB9E905B7C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in the GNU coreutils \"split\" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service."},{"lang":"es","value":"Se encontró una falla en el programa \"split\" de GNU coreutils. Podría producirse un desbordamiento de almacenamiento dinámico con datos controlados por el usuario de varios cientos de bytes de longitud en la función line_bytes_split(), lo que podría provocar un bloqueo de la aplicación y una denegación de servicio."}],"id":"CVE-2024-0684","lastModified":"2026-10-15T01:17:18.093","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"patrick@puiterwijk.org","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0684","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-02-06T15:37:23.097441Z","version":"2.0.3"}}]},"published":"2024-02-06T09:15:52.643","references":[{"source":"patrick@puiterwijk.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2024-0684"},{"source":"patrick@puiterwijk.org","tags":["Issue Tracking","Patch"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258948"},{"source":"patrick@puiterwijk.org","tags":["Mailing List","Patch"],"url":"https://www.openwall.com/lists/oss-security/2024/01/18/2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2024-0684"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258948"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2KAURFJIEYY2BWCPN4AZDYCVMFD5J4GB/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.netapp.com/advisory/ntap-20240808-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://www.openwall.com/lists/oss-security/2024/01/18/2"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"sourceIdentifier":"patrick@puiterwijk.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"patrick@puiterwijk.org","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}
|