add converted curl records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 16, 2024 · 1e96d4e · 1e96d4e
1 parent 524ffbb
commit 1e96d4e
Show file tree

Hide file tree

Showing 4 changed files with 151 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-2004.json b/data/anchore/2024/CVE-2024-2004.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "curl",
+    "cveId": "CVE-2024-2004",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://hackerone.com/reports/2384833",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/",
+      "https://curl.se/docs/CVE-2024-2004.json",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/",
+      "http://www.openwall.com/lists/oss-security/2024/03/27/1",
+      "https://curl.se/docs/CVE-2024-2004.html"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"
+        ],
+        "product": "curl",
+        "vendor": "curl",
+        "versions": [
+          {
+            "lessThan": "8.7.0",
+            "status": "affected",
+            "version": "7.85.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2379.json b/data/anchore/2024/CVE-2024-2379.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "curl",
+    "cveId": "CVE-2024-2379",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://curl.se/docs/CVE-2024-2379.html",
+      "https://hackerone.com/reports/2410774",
+      "http://www.openwall.com/lists/oss-security/2024/03/27/2",
+      "https://curl.se/docs/CVE-2024-2379.json"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"
+        ],
+        "product": "curl",
+        "vendor": "curl",
+        "versions": [
+          {
+            "lessThan": "8.7.0",
+            "status": "affected",
+            "version": "8.6.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2398.json b/data/anchore/2024/CVE-2024-2398.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "curl",
+    "cveId": "CVE-2024-2398",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://security.netapp.com/advisory/ntap-20240503-0009/",
+      "https://hackerone.com/reports/2402845",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/",
+      "https://curl.se/docs/CVE-2024-2398.html",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/",
+      "https://curl.se/docs/CVE-2024-2398.json",
+      "http://www.openwall.com/lists/oss-security/2024/03/27/3"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"
+        ],
+        "product": "curl",
+        "vendor": "curl",
+        "versions": [
+          {
+            "lessThan": "8.7.0",
+            "status": "affected",
+            "version": "7.4.4",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2466.json b/data/anchore/2024/CVE-2024-2466.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "curl",
+    "cveId": "CVE-2024-2466",
+    "needsReview": true,
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://hackerone.com/reports/2416725",
+      "https://security.netapp.com/advisory/ntap-20240503-0010/",
+      "http://www.openwall.com/lists/oss-security/2024/03/27/4",
+      "https://curl.se/docs/CVE-2024-2466.html",
+      "https://curl.se/docs/CVE-2024-2466.json"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"
+        ],
+        "product": "curl",
+        "vendor": "curl",
+        "versions": [
+          {
+            "lessThan": "8.7.0",
+            "status": "affected",
+            "version": "8.5.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}