[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jun 17 07:58:44 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1ffe7d5b by Salvatore Bonaccorso at 2022-06-17T08:58:18+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4025,19 +4025,19 @@ CVE-2022-1963
 CVE-2021-4233
 	RESERVED
 CVE-2022-32158 (Splunk Enterprise deployment servers in versions before 9.0 let client ...)
-	TODO: check
+	NOT-FOR-US: Splunk Enterprise deployment servers
 CVE-2022-32157 (Splunk Enterprise deployment servers in versions before 9.0 allow unau ...)
-	TODO: check
+	NOT-FOR-US: Splunk Enterprise deployment servers
 CVE-2022-32156 (In Splunk Enterprise and Universal Forwarder versions before 9.0, the  ...)
-	TODO: check
+	NOT-FOR-US: Splunk Enterprise and Universal Forwarder
 CVE-2022-32155 (In universal forwarder versions before 9.0, management services are av ...)
-	TODO: check
+	NOT-FOR-US: Splunk Enterprise and Universal Forwarder
 CVE-2022-32154 (Dashboards in Splunk Enterprise versions before 9.0 might let an attac ...)
-	TODO: check
+	NOT-FOR-US: Dashboards in Splunk Enterprise
 CVE-2022-32153 (Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and S ...)
-	TODO: check
+	NOT-FOR-US: Splunk Enterprise
 CVE-2022-32152 (Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and S ...)
-	TODO: check
+	NOT-FOR-US: Splunk Enterprise
 CVE-2022-32151 (The httplib and urllib Python libraries that Splunk shipped with Splun ...)
 	TODO: check
 CVE-2022-32150
@@ -6927,7 +6927,7 @@ CVE-2022-31068
 CVE-2022-31067
 	RESERVED
 CVE-2022-31066 (EdgeX Foundry is an open source project for building a common open fra ...)
-	TODO: check
+	NOT-FOR-US: EdgeX Foundry
 CVE-2022-31065
 	RESERVED
 CVE-2022-31064
@@ -8077,53 +8077,53 @@ CVE-2022-30672
 CVE-2022-30671
 	RESERVED
 CVE-2022-30670 (RoboHelp Server earlier versions than RHS 11 Update 3 are affected by  ...)
-	TODO: check
+	NOT-FOR-US: RoboHelp Server
 CVE-2022-30669 (Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlie ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30668 (Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlie ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30667 (Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlie ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30666 (Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlie ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30665 (Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier)  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30664 (Adobe Animate version 22.0.5 (and earlier) is affected by an out-of-bo ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30663 (Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier)  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30662 (Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier)  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30661 (Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier)  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30660 (Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier)  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30659 (Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier)  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30658 (Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier)  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30657 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30656 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30655 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30654 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30653 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30652 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30651 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30650 (Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are  ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30649 (Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlie ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30648 (Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlie ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30647 (Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlie ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2022-30646
 	RESERVED
 CVE-2022-30645
@@ -8247,19 +8247,19 @@ CVE-2022-30608
 CVE-2022-30607
 	RESERVED
 CVE-2022-30546 (Out-of-bounds read vulnerability exists in the simulator module contai ...)
-	TODO: check
+	NOT-FOR-US: Fuji Electric V-SFT
 CVE-2022-30538 (Out-of-bounds write vulnerability exists in the simulator module conta ...)
-	TODO: check
+	NOT-FOR-US: Fuji Electric V-SFT
 CVE-2022-29925 (Access of uninitialized pointer vulnerability exists in the simulator  ...)
-	TODO: check
+	NOT-FOR-US: Fuji Electric V-SFT
 CVE-2022-29522 (Use after free vulnerability exists in the simulator module contained  ...)
-	TODO: check
+	NOT-FOR-US: Fuji Electric V-SFT
 CVE-2022-29482 ('Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 ...)
 	NOT-FOR-US: 'Mobaoku-Auction&Flea Market' App for iOS
 CVE-2022-27231 (Cross-site scripting vulnerability exists in WP Statistics versions pr ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2022-26302 (Heap-based buffer overflow exists in the simulator module contained in ...)
-	TODO: check
+	NOT-FOR-US: Fuji Electric V-SFT
 CVE-2022-1699 (Uncontrolled Resource Consumption in GitHub repository causefx/organiz ...)
 	NOT-FOR-US: organizr
 CVE-2022-1698 (Allowing long password leads to denial of service in GitHub repository ...)
@@ -9576,7 +9576,7 @@ CVE-2022-30195
 CVE-2022-30194
 	RESERVED
 CVE-2022-30193 (AV1 Video Extension Remote Code Execution Vulnerability. This CVE ID i ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30192
 	RESERVED
 CVE-2022-30191
@@ -9584,9 +9584,9 @@ CVE-2022-30191
 CVE-2022-30190 (Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution ...)
 	NOT-FOR-US: Microsoft
 CVE-2022-30189 (Windows Autopilot Device Management and Enrollment Client Spoofing Vul ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30188 (HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30187
 	RESERVED
 CVE-2022-30186
@@ -9602,105 +9602,105 @@ CVE-2022-30182
 CVE-2022-30181
 	RESERVED
 CVE-2022-30180 (Azure RTOS GUIX Studio Information Disclosure Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30179 (Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE I ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30178 (Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE I ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30177 (Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE I ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30176
 	RESERVED
 CVE-2022-30175
 	RESERVED
 CVE-2022-30174 (Microsoft Office Remote Code Execution Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30173 (Microsoft Excel Remote Code Execution Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30172 (Microsoft Office Information Disclosure Vulnerability. This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30171 (Microsoft Office Information Disclosure Vulnerability. This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30170
 	RESERVED
 CVE-2022-30169
 	RESERVED
 CVE-2022-30168 (Microsoft Photos App Remote Code Execution Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30167 (AV1 Video Extension Remote Code Execution Vulnerability. This CVE ID i ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30166 (Local Security Authority Subsystem Service Elevation of Privilege Vuln ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30165 (Windows Kerberos Elevation of Privilege Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30164 (Kerberos AppContainer Security Feature Bypass Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30163 (Windows Hyper-V Remote Code Execution Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30162 (Windows Kernel Information Disclosure Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30161 (Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30160 (Windows Advanced Local Procedure Call Elevation of Privilege Vulnerabi ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30159 (Microsoft Office Information Disclosure Vulnerability. This CVE ID is  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30158 (Microsoft SharePoint Server Remote Code Execution Vulnerability. This  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30157 (Microsoft SharePoint Server Remote Code Execution Vulnerability. This  ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30156
 	RESERVED
 CVE-2022-30155 (Windows Kernel Denial of Service Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30154 (Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Pr ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30153 (Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30152 (Windows Network Address Translation (NAT) Denial of Service Vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30151 (Windows Ancillary Function Driver for WinSock Elevation of Privilege V ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30150 (Windows Defender Remote Credential Guard Elevation of Privilege Vulner ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30149 (Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30148 (Windows Desired State Configuration (DSC) Information Disclosure Vulne ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30147 (Windows Installer Elevation of Privilege Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30146 (Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30145 (Windows Encrypting File System (EFS) Remote Code Execution Vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30144
 	RESERVED
 CVE-2022-30143 (Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30142 (Windows File History Remote Code Execution Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30141 (Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30140 (Windows iSCSI Discovery Service Remote Code Execution Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30139 (Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30138 (Windows Print Spooler Elevation of Privilege Vulnerability. This CVE I ...)
 	NOT-FOR-US: Microsoft
 CVE-2022-30137 (Azure Service Fabric Container Elevation of Privilege Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30136 (Windows Network File System Remote Code Execution Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30135 (Windows Media Center Elevation of Privilege Vulnerability. ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30134
 	RESERVED
 CVE-2022-30133
 	RESERVED
 CVE-2022-30132 (Windows Container Manager Service Elevation of Privilege Vulnerability ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30131 (Windows Container Isolation FS Filter Driver Elevation of Privilege Vu ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2022-30130 (.NET Framework Denial of Service Vulnerability. ...)
 	NOT-FOR-US: Microsoft
 CVE-2022-30129 (Visual Studio Code Remote Code Execution Vulnerability. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1ffe7d5b4197475b1bc41f17e996ed50e7629ea1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1ffe7d5b4197475b1bc41f17e996ed50e7629ea1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220617/3cef7836/attachment.htm>


More information about the debian-security-tracker-commits mailing list