diff --git a/data/anchore/2024/CVE-2024-1622.json b/data/anchore/2024/CVE-2024-1622.json new file mode 100644 index 00000000..772ab8c3 --- /dev/null +++ b/data/anchore/2024/CVE-2024-1622.json @@ -0,0 +1,39 @@ +{ + "additionalMetadata": { + "cna": "nlnet labs", + "cveId": "CVE-2024-1622", + "reason": "Added CPE configurations because not yet analyzed by NVD.", + "references": [ + "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N2N3N3SNBHSH7GN3JOLR7YUF5FCTQQ5O/", + "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HPRUIPAI2BBDGFVLN733JLIUJWLEBLF/", + "https://www.nlnetlabs.nl/downloads/routinator/CVE-2024-1622.txt", + "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K52QRRYBHLP73RAS3CGOPBWYT7EZVP6O/" + ], + "solutions": [ + "This issue is fixed in 0.13.2 and all later versions." + ] + }, + "adp": { + "affected": [ + { + "cpes": [ + "cpe:2.3:a:nlnetlabs:routinator:*:*:*:*:*:*:*:*" + ], + "product": "Routinator", + "vendor": "NLnet Labs", + "versions": [ + { + "lessThan": "0.13.2", + "status": "affected", + "version": "0", + "versionType": "semver" + } + ] + } + ], + "providerMetadata": { + "orgId": "00000000-0000-4000-8000-000000000000", + "shortName": "anchoreadp" + } + } +} \ No newline at end of file diff --git a/data/anchore/2024/CVE-2024-1931.json b/data/anchore/2024/CVE-2024-1931.json new file mode 100644 index 00000000..f889ac67 --- /dev/null +++ b/data/anchore/2024/CVE-2024-1931.json @@ -0,0 +1,39 @@ +{ + "additionalMetadata": { + "cna": "nlnet labs", + "cveId": "CVE-2024-1931", + "reason": "Added CPE configurations because not yet analyzed by NVD.", + "references": [ + "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B2JUIFPA7H75Q2W3VXW2TUNHK6NVGOX4/", + "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBR4H7RCVMJ6H76S4LLRSY5EBFTYWGXK/", + "https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt", + "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4VCBRQ7KMSIGBQ6A4SBL5PF326DIJIIV/" + ], + "solutions": [ + "This issue is fixed in 1.19.2 and all later versions. For the vulnerable versions 1.18.0 up to and including 1.19.1, the option 'ede: no' (default configuration) is also a solution as it does not exercise the vulnerable code path." + ] + }, + "adp": { + "affected": [ + { + "cpes": [ + "cpe:2.3:a:nlnetlabs:unbound:*:*:*:*:*:*:*:*" + ], + "product": "Unbound", + "vendor": "NLnet Labs", + "versions": [ + { + "lessThan": "1.19.2", + "status": "affected", + "version": "1.18.0", + "versionType": "semver" + } + ] + } + ], + "providerMetadata": { + "orgId": "00000000-0000-4000-8000-000000000000", + "shortName": "anchoreadp" + } + } +} \ No newline at end of file