blob: 7643d0ca95bfd4429a708ede337b088336adf851 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
Security Advisories and CVE Catalog
===================================
Report a vulnerability
----------------------
Please follow the repository's
`security policy <https://github.com/cherry-embedded/CherryUSB/security/policy>`_
or email ``[email protected]``.
Published advisories
--------------------
The authoritative GitHub advisory list is available at
`CherryUSB Security Advisories <https://github.com/cherry-embedded/CherryUSB/security/advisories>`_.
No entries have been added to this catalog yet. This does not imply that no
vulnerabilities or external advisories exist. Add entries only after the
maintainers have confirmed the issue and approved public disclosure.
Information required for each entry
-----------------------------------
* Advisory title and publication date.
* GHSA identifier and public advisory URL, if assigned.
* CVE identifier, if assigned; an advisory may be published without a CVE.
* Affected releases or commits and any required build configuration.
* Fixed releases and full fix commit identifiers.
* Affected host/device classes and controller drivers, where applicable.
* Impact, trigger conditions, and available workarounds.
* CWE and CVSS version/vector/score, if assessed.
* Reporter attribution, with the reporter's consent.
Do not infer an affected version range from the fix commit alone, invent CVE
identifiers, or treat an internal code review finding as a published advisory.
CVE advisory template
---------------------
This is a template, not a published advisory. Replace ``xxxx`` with confirmed information.
CVE-xxxx-xxxx: xxxx
~~~~~~~~~~~~~~~~~~~
:Publication date: xxxx
:CVE ID: CVE-xxxx-xxxx
:GHSA ID: GHSA-xxxx-xxxx-xxxx
:Severity: xxxx
:CWE: CWE-xxxx
:CVSS version, vector, and score: xxxx
:Affected versions: xxxx
:Fixed versions: xxxx
:Fix commit: xxxx
:Affected components: xxxx
:Advisory URL: xxxx
:Reporter: xxxx
**Description**
xxxx
**Impact and trigger conditions**
xxxx
**Fix**
xxxx
**Workarounds**
xxxx
**References**
* xxxx
|
