Lucene search
WolfiWOLFI:CVE-2024-45395HistorySep 19, 2024 - 9:11 a.m.
CVE-2024-45395 vulnerabilities
2024-09-1909:11:50
packages.wolfi.dev
cve-2024-45395
vulnerabilities
slsa-verifier
cosign
unix
packages
CVSS3
3.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
AI Score
4
Confidence
High
Vulnerabilities for packages: cosign, slsa-verifier, gh
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Wolfi | unknown | x86_64 | cosign | <= 2.4.0-r2 | cosign-2.4.0-r2.apk |
| Wolfi | unknown | aarch64 | cosign | <= 2.4.0-r2 | cosign-2.4.0-r2.apk |
| Wolfi | unknown | x86_64 | gh | <= 2.56.0-r0 | gh-2.56.0-r0.apk |
| Wolfi | unknown | aarch64 | gh | <= 2.56.0-r0 | gh-2.56.0-r0.apk |
| Wolfi | unknown | x86_64 | slsa-verifier | <= 2.6.0-r3 | slsa-verifier-2.6.0-r3.apk |
| Wolfi | unknown | aarch64 | slsa-verifier | <= 2.6.0-r3 | slsa-verifier-2.6.0-r3.apk |
Related
osv
osv
sigstore-go has an unbounded loop over untrusted input can lead to endless data attack in github.com/sigstore/sigstore-go
2024-09-06 20:43:50
sigstore-go has an unbounded loop over untrusted input can lead to endless data attack
2024-09-04 20:18:18
CVE-2024-45395
2024-09-04 21:15:14
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-45395
2024-09-04 21:15:14
cve
cve
CVE-2024-45395
2024-09-04 21:15:14
cvelist
cvelist
github
github
CVSS3
3.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
AI Score
4
Confidence
High
Related for WOLFI:CVE-2024-45395