diff --git a/advisories/unreviewed/2022/05/GHSA-wwwj-58hm-mxm3/GHSA-wwwj-58hm-mxm3.json b/advisories/unreviewed/2022/05/GHSA-wwwj-58hm-mxm3/GHSA-wwwj-58hm-mxm3.json index 2def0d0643d78..4c05d359ab2fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwwj-58hm-mxm3/GHSA-wwwj-58hm-mxm3.json +++ b/advisories/unreviewed/2022/05/GHSA-wwwj-58hm-mxm3/GHSA-wwwj-58hm-mxm3.json @@ -1,27 +1,69 @@ { "schema_version": "1.4.0", "id": "GHSA-wwwj-58hm-mxm3", - "modified": "2022-05-14T03:51:35Z", + "modified": "2023-02-03T05:00:43Z", "published": "2022-05-14T03:51:35Z", "aliases": [ "CVE-2012-0884" ], + "summary": "Improper restriction of oracle behavior in OpenSSL CMS and PKCS#7 (Million Message Attack)", "details": "The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.", "severity": [], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "GitHub Actions", + "name": "" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0884" }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2012-0884" + }, { "type": "WEB", "url": "https://downloads.avaya.com/css/P8/documents/100162507" }, + { + "type": "PACKAGE", + "url": "https://github.com/openssl/openssl" + }, { "type": "WEB", "url": "https://hermes.opensuse.org/messages/14330767" }, + { + "type": "WEB", + "url": "https://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001735.html" + }, + { + "type": "WEB", + "url": "https://security-tracker.debian.org/tracker/CVE-2012-0884" + }, + { + "type": "WEB", + "url": "https://www.cve.org/CVERecord?id=CVE-2012-0884" + }, + { + "type": "WEB", + "url": "https://www.suse.com/security/cve/CVE-2012-0884.html" + }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html"