From 84a9fb887bcc21e7f6f53714acd813ed1697a54a Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Tue, 28 May 2024 18:37:05 +0100 Subject: [PATCH] enrich protobuf c++ CVE-2024-2410 Signed-off-by: Weston Steimel --- data/anchore/2024/CVE-2024-2410.json | 34 ++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 data/anchore/2024/CVE-2024-2410.json diff --git a/data/anchore/2024/CVE-2024-2410.json b/data/anchore/2024/CVE-2024-2410.json new file mode 100644 index 00000000..e305a481 --- /dev/null +++ b/data/anchore/2024/CVE-2024-2410.json @@ -0,0 +1,34 @@ +{ + "additionalMetadata": { + "cna": "google", + "cveId": "CVE-2024-2410", + "reason": "Added CPE configurations because not yet analyzed by NVD.", + "references": [ + "https://github.com/protocolbuffers/protobuf/releases/tag/v25.0" + ] + }, + "adp": { + "affected": [ + { + "cpes": [ + "cpe:2.3:a:google:protobuf-cpp:*:*:*:*:*:*:*:*" + ], + "product": "protobuf", + "repo": "https://github.com/protocolbuffers/protobuf", + "vendor": "protocolbuffers", + "versions": [ + { + "lessThan": "4.25.0", + "status": "affected", + "version": "4.22.0", + "versionType": "semver" + } + ] + } + ], + "providerMetadata": { + "orgId": "00000000-0000-4000-8000-000000000000", + "shortName": "anchoreadp" + } + } +} \ No newline at end of file