find_vulns_by_cves エンドポイント一覧に戻る

{
  "sidfm": [
    {
      "id": 40924,
      "title": "IBM Security Verify Access に任意のコードを実行されるなど複数の問題",
      "area_id": 3,
      "create_datetime": "2022-01-07T15:34:11.809+00:00",
      "update_datetime": "2022-01-07T15:34:11.809+00:00",
      "short_description": "IBM Security Verify Access は、実装上の原因で複数のセキュリティホールが存在します。これらのセキュリティホールを利用された場合、glibc を利用するアプリケーションで細工された正規表現パターンを処理することによって、任意のコードを実行される可能性があります。",
      "risk_id": 3,
      "affect_products": [
        {
          "product": {
            "id": 855,
            "name": "IBM Security Verify Access"
          },
          "create_date": "2022-01-07",
          "update_date": "2022-01-07"
        }
      ],
      "removed_affect_products": [],
      "cves": [
        {
          "cve_id": "CVE-2019-9169",
          "cvss2": {
            "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "base_score": 7.5,
            "create_datetime": "2022-01-07T15:34:11.809+00:00",
            "update_datetime": "2022-01-07T15:34:11.809+00:00",
            "exploitable": true
          },
          "cvss3": {
            "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "base_score": 9.8,
            "create_datetime": "2022-01-07T15:34:11.809+00:00",
            "update_datetime": "2022-01-07T15:34:11.809+00:00",
            "exploitable": true
          }
        }
      ]
    },
    {
      "id": 39338,
      "title": "Amazon Linux AMI 2 の glibc に任意のコードを実行されるなど複数の問題",
      "area_id": 3,
      "create_datetime": "2021-06-24T15:58:46.397+00:00",
      "update_datetime": "2021-06-24T15:58:46.397+00:00",
      "short_description": "Amazon Linux AMI 2 の glibc パッケージは、実装上の原因で複数のセキュリティホールが存在します。これらのセキュリティホールを利用された場合、glibc を利用するアプリケーションで細工された正規表現パターンを処理することによって、任意のコードを実行されるなどの攻撃を受ける可能性があります。",
      "risk_id": 3,
      "affect_products": [
        {
          "product": {
            "id": 685,
            "name": "Amazon Linux AMI"
          },
          "create_date": "2021-06-24",
          "update_date": "2021-06-24"
        }
      ],
      "removed_affect_products": [],
      "cves": [
        {
          "cve_id": "CVE-2019-9169",
          "cvss2": {
            "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "base_score": 7.5,
            "create_datetime": "2021-06-24T15:58:46.397+00:00",
            "update_datetime": "2021-06-24T15:58:46.397+00:00",
            "exploitable": true
          },
          "cvss3": {
            "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "base_score": 9.8,
            "create_datetime": "2021-06-24T15:58:46.397+00:00",
            "update_datetime": "2021-06-24T15:58:46.397+00:00",
            "exploitable": true
          }
        }
      ]
    }
  ],
  "vadb": [
    {
      "id": "CVE-2019-9169",
      "cveTags": [],
      "metrics": {
        "cvssMetricV2": [
          {
            "type": "Primary",
            "source": "nvd@nist.gov",
            "cvssData": {
              "version": "2.0",
              "baseScore": 7.5,
              "accessVector": "NETWORK",
              "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
              "authentication": "NONE",
              "integrityImpact": "PARTIAL",
              "accessComplexity": "LOW",
              "availabilityImpact": "PARTIAL",
              "confidentialityImpact": "PARTIAL"
            },
            "acInsufInfo": false,
            "impactScore": 6.4,
            "baseSeverity": "HIGH",
            "obtainAllPrivilege": false,
            "exploitabilityScore": 10.0,
            "obtainUserPrivilege": false,
            "obtainOtherPrivilege": false,
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV31": [
          {
            "type": "Primary",
            "source": "nvd@nist.gov",
            "cvssData": {
              "scope": "UNCHANGED",
              "version": "3.1",
              "baseScore": 9.8,
              "attackVector": "NETWORK",
              "baseSeverity": "CRITICAL",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "integrityImpact": "HIGH",
              "userInteraction": "NONE",
              "attackComplexity": "LOW",
              "availabilityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "confidentialityImpact": "HIGH"
            },
            "impactScore": 5.9,
            "exploitabilityScore": 3.9
          }
        ]
      },
      "published": "2019-02-26T02:29:00.497",
      "references": [
        {
          "url": "http://www.securityfocus.com/bid/107160",
          "tags": [
            "Broken Link"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34140",
          "tags": [
            "Exploit",
            "Mailing List",
            "Vendor Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34142",
          "tags": [
            "Exploit",
            "Mailing List",
            "Vendor Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10278",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://security.gentoo.org/glsa/202006-04",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20190315-0002/",
          "tags": [
            "Patch",
            "Third Party Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=24114",
          "tags": [
            "Issue Tracking",
            "Patch",
            "Third Party Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=583dd860d5b833037175247230a328f0050dbfe9",
          "source": "cve@mitre.org"
        },
        {
          "url": "https://support.f5.com/csp/article/K54823184",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://usn.ubuntu.com/4416-1/",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html",
          "tags": [
            "Not Applicable"
          ],
          "source": "cve@mitre.org"
        },
        {
          "url": "http://www.securityfocus.com/bid/107160",
          "tags": [
            "Broken Link"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34140",
          "tags": [
            "Exploit",
            "Mailing List",
            "Vendor Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34142",
          "tags": [
            "Exploit",
            "Mailing List",
            "Vendor Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10278",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://security.gentoo.org/glsa/202006-04",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20190315-0002/",
          "tags": [
            "Patch",
            "Third Party Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=24114",
          "tags": [
            "Issue Tracking",
            "Patch",
            "Third Party Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=583dd860d5b833037175247230a328f0050dbfe9",
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://support.f5.com/csp/article/K54823184",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://usn.ubuntu.com/4416-1/",
          "tags": [
            "Third Party Advisory"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html",
          "tags": [
            "Not Applicable"
          ],
          "source": "af854a3a-2127-422b-91ae-364da2661108"
        }
      ],
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "type": "Primary",
          "source": "nvd@nist.gov",
          "description": [
            {
              "lang": "en",
              "value": "CWE-125"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match."
        },
        {
          "lang": "es",
          "value": "En la biblioteca GNU C (también conocida como glibc o libc6), hasta la versión 2.29, proceed_next_node en posix/regexec.c tiene una sobrelectura de búfer basada en memoria dinámica (heap) mediante un intento de coincidencia de expresiones regulares que no distinguen entre mayúsculas y minúsculas."
        }
      ],
      "lastModified": "2024-11-21T04:51:07.870",
      "configurations": [
        {
          "nodes": [
            {
              "negate": false,
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "60F1CB2F-5B42-4134-8328-480F5F07932D",
                  "versionEndIncluding": "2.29"
                }
              ],
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "negate": false,
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:netapp:cloud_backup:*:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "4433FEA1-564D-4592-BB12-1C194B543928"
                },
                {
                  "criteria": "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "E7CF3019-975D-40BB-A8A4-894E62BD3797"
                },
                {
                  "criteria": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"
                }
              ],
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "negate": false,
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "386CB247-4434-46BB-8A58-258835A80C89",
                  "versionEndExcluding": "7.7.2.21",
                  "versionStartIncluding": "7.7.2.0"
                },
                {
                  "criteria": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "98F71D11-7579-4005-B3F8-4A4324E81BD3",
                  "versionEndExcluding": "7.8.2.8",
                  "versionStartIncluding": "7.8.2.0"
                },
                {
                  "criteria": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "9D943214-14D8-47BC-BCF4-76B78EE95028",
                  "versionEndExcluding": "8.1.1",
                  "versionStartIncluding": "8.0.0"
                }
              ],
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "negate": false,
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"
                },
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
                },
                {
                  "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
                  "vulnerable": true,
                  "matchCriteriaId": "A31C8344-3E02-4EB8-8BD8-4C84B7959624"
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "epss": "0.11071",
      "epss_percentile": "0.9312"
    }
  ],
  "total_count": 7,
  "limit": 2,
  "offset": 0
}