enrich latest NGINX cve records

Signed-off-by: Weston Steimel <[email protected]>
anchore · Jun 3, 2024 · 02794d7 · 02794d7
1 parent 92a5ff7
commit 02794d7
Show file tree

Hide file tree

Showing 4 changed files with 220 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-31079.json b/data/anchore/2024/CVE-2024-31079.json
@@ -0,0 +1,55 @@
+{
+  "additionalMetadata": {
+    "cna": "f5",
+    "cveId": "CVE-2024-31079",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://my.f5.com/manage/s/article/K000139611"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
+          "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Open Source",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "1.26.1",
+            "status": "affected",
+            "version": "1.25.0",
+            "versionType": "semver"
+          }
+        ]
+      },
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Plus",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "R32",
+            "status": "affected",
+            "version": "R30",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-32760.json b/data/anchore/2024/CVE-2024-32760.json
@@ -0,0 +1,55 @@
+{
+  "additionalMetadata": {
+    "cna": "f5",
+    "cveId": "CVE-2024-32760",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://my.f5.com/manage/s/article/K000139609"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
+          "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Open Source",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "1.26.1",
+            "status": "affected",
+            "version": "1.25.0",
+            "versionType": "semver"
+          }
+        ]
+      },
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Plus",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "R32",
+            "status": "affected",
+            "version": "R30",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-34161.json b/data/anchore/2024/CVE-2024-34161.json
@@ -0,0 +1,55 @@
+{
+  "additionalMetadata": {
+    "cna": "f5",
+    "cveId": "CVE-2024-34161",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://my.f5.com/manage/s/article/K000139627"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
+          "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Open Source",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "1.26.1",
+            "status": "affected",
+            "version": "1.25.0",
+            "versionType": "semver"
+          }
+        ]
+      },
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Plus",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "R32",
+            "status": "affected",
+            "version": "R30",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-35200.json b/data/anchore/2024/CVE-2024-35200.json
@@ -0,0 +1,55 @@
+{
+  "additionalMetadata": {
+    "cna": "f5",
+    "cveId": "CVE-2024-35200",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://my.f5.com/manage/s/article/K000139612"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
+          "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Open Source",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "1.26.1",
+            "status": "affected",
+            "version": "1.25.0",
+            "versionType": "custom"
+          }
+        ]
+      },
+      {
+        "cpes": [
+          "cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*"
+        ],
+        "modules": [
+          "HTTP/3"
+        ],
+        "product": "NGINX Plus",
+        "vendor": "F5",
+        "versions": [
+          {
+            "lessThan": "R32",
+            "status": "affected",
+            "version": "R30",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}