Merge pull request #5164 from github/Marcono1234-GHSA-3mm4-w7v6-4rhv

github · Jan 13, 2025 · 4845f2d · 4845f2d
2 parents a838fc0 + 34b6048
commit 4845f2d
Showing 1 changed file with 37 additions and 4 deletions.
diff --git a/advisories/unreviewed/2022/01/GHSA-3mm4-w7v6-4rhv/GHSA-3mm4-w7v6-4rhv.json b/advisories/unreviewed/2022/01/GHSA-3mm4-w7v6-4rhv/GHSA-3mm4-w7v6-4rhv.json
@@ -1,30 +1,63 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3mm4-w7v6-4rhv",
-  "modified": "2022-01-26T00:02:58Z",
+  "modified": "2023-02-03T05:05:10Z",
   "published": "2022-01-20T00:01:54Z",
   "aliases": [
     "CVE-2022-23435"
   ],
+  "summary": "Denial of service due to unrestricted comment length",
   "details": "decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.",
-  "severity": [],
-  "affected": [],
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "pl.droidsonroids.gif:android-gif-drawable"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.2.24"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23435"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/koral--/android-gif-drawable/issues/792#issuecomment-1048850678"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/koral--/android-gif-drawable/commit/9f0f0c89e6fa38548163771feeb4bde84b828887"
     },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/koral--/android-gif-drawable"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/koral--/android-gif-drawable/compare/v1.2.23...v1.2.24"
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,