conversion for glibc records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 20, 2024 · 35c5c4b · 35c5c4b
1 parent 8cccbec
commit 35c5c4b
Show file tree

Hide file tree

Showing 5 changed files with 172 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-2961.json b/data/anchore/2024/CVE-2024-2961.json
@@ -0,0 +1,40 @@
+{
+  "additionalMetadata": {
+    "cna": "glibc",
+    "cveId": "CVE-2024-2961",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html",
+      "http://www.openwall.com/lists/oss-security/2024/04/24/2",
+      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/",
+      "http://www.openwall.com/lists/oss-security/2024/04/18/4",
+      "http://www.openwall.com/lists/oss-security/2024/04/17/9",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*"
+        ],
+        "product": "glibc",
+        "vendor": "The GNU C Library",
+        "versions": [
+          {
+            "lessThan": "2.40",
+            "status": "affected",
+            "version": "2.1.93",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-33599.json b/data/anchore/2024/CVE-2024-33599.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "glibc",
+    "cveId": "CVE-2024-33599",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*"
+        ],
+        "product": "glibc",
+        "vendor": "The GNU C Library",
+        "versions": [
+          {
+            "lessThan": "2.40",
+            "status": "affected",
+            "version": "2.15",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-33600.json b/data/anchore/2024/CVE-2024-33600.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "glibc",
+    "cveId": "CVE-2024-33600",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*"
+        ],
+        "product": "glibc",
+        "vendor": "The GNU C Library",
+        "versions": [
+          {
+            "lessThan": "2.40",
+            "status": "affected",
+            "version": "2.15",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-33601.json b/data/anchore/2024/CVE-2024-33601.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "glibc",
+    "cveId": "CVE-2024-33601",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*"
+        ],
+        "product": "glibc",
+        "vendor": "The GNU C Library",
+        "versions": [
+          {
+            "lessThan": "2.40",
+            "status": "affected",
+            "version": "2.15",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-33602.json b/data/anchore/2024/CVE-2024-33602.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "glibc",
+    "cveId": "CVE-2024-33602",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*"
+        ],
+        "product": "glibc",
+        "vendor": "The GNU C Library",
+        "versions": [
+          {
+            "lessThan": "2.40",
+            "status": "affected",
+            "version": "2.15",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}