{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens Product CERT",
        "summary": "reporting these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow a remote attacker to crash the DNS service or execute arbitrary code by crafting malicious DNS responses.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Chemical, Energy, Food and Agriculture, Healthcare and Public Health, Transportation Systems, and Water and Wastewater Systems",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and \nsolutions, please contact the Siemens ProductCERT:\n\nhttps://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and  solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "other",
        "text": "No known public exploits specifically target these vulnerabilities.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-332-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-332-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-332-01 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-332-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B"
      },
      {
        "category": "external",
        "summary": "SSA-496604: SSA-689071: DNSMasq Vulnerabilities in SCALANCE W1750D, SCALANCE M-800 / S615 and RUGGEDCOM RM1224 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/SSA-689071.txt"
      }
    ],
    "title": "Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)",
    "tracking": {
      "current_release_date": "2020-10-13T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-17-332-01",
      "initial_release_date": "2017-11-28T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-11-28T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-332-01 Siemens SCALANCE W1750D, M800, and S615"
        },
        {
          "date": "2018-04-05T00:00:00.000000Z",
          "legacy_version": "A",
          "number": "2",
          "summary": "ICSA-17-332-01 Siemens SIMATIC SCALANCE W1750D, M800, and S615 (Update A)"
        },
        {
          "date": "2018-05-10T00:00:00.000000Z",
          "legacy_version": "B",
          "number": "3",
          "summary": "ICSA-17-332-01 Siemens SCALANCE W1750D, M800, and S615 (Update B)"
        },
        {
          "date": "2020-10-13T00:00:00.000000Z",
          "legacy_version": "C",
          "number": "4",
          "summary": "ICSA-17-332-01 Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V5.0",
                "product": {
                  "name": "RUGGEDCOM RM1224: All versions \u003c V5.0",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RM1224"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V5.0",
                "product": {
                  "name": "SCALANCE M-800 / S615: All versions \u003c V5.0",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE M-800 / S615"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V6.5.1.5",
                "product": {
                  "name": "SCALANCE W1750D: All versions \u003c V6.5.1.5",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W1750D"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13704",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13704"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14495"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14496"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash or potentially execute arbitrary code by sending specially crafted DNS responses to the DNSmasq process. In order to exploit this vulnerability, an attacker must be able to trigger DNS requests from the device, and must be in a privileged position to inject malicious DNS responses.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-14495",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-14496",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens",
        "summary": "reporting these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Do not click web links or open attachments in unsolicited email messages.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-24-074-07 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-074-07.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-24-074-07 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-07"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Siemens SIMATIC",
    "tracking": {
      "current_release_date": "2024-03-14T06:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-24-074-07",
      "initial_release_date": "2024-03-14T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2024-03-14T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.2",
                "product": {
                  "name": "Siemens SIMATIC RF160B (6GT2003-0FA00): \u003cV2.2",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF160B (6GT2003-0FA00)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash or potentially execute arbitrary code by sending specially crafted DNS responses to the DNSmasq process. In order to exploit this vulnerability, an attacker must be able to trigger DNS requests from the device, and must be in a privileged position to inject malicious DNS responses.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-18509",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18509"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-0338",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-9 Android ID: A-123700107",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0338"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-0417",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-8.1, Android-9 Android ID: A-154319182",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0417"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-10768",
      "cwe": {
        "id": "CWE-440",
        "name": "Expected Behavior Violation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being \u0027force disabled\u0027 when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10768"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-11301",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11301"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-14305",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An out-of-bounds memory write flaw was found in how the Linux kernel\u0027s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14305"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-14381",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux kernel\u0027s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14381"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-15436",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15436"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-24587",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-24587"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-25705",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw in ICMP packets in the Linux kernel was found to allow to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well. Kernel versions before 5.10 may be vulnerable to this issue.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-25705"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-26555",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-26555"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-26558",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-26558"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-29660",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-29660"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-29661",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-29661"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0302",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android-9 Android-10Android ID: A-155287782",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0302"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0305",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10 Android ID: A-154015447",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0305"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0325",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-174238784",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0325"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0326",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_copy_client_info of p2p.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi direct search, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-172937525",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0326"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0327",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-172935267",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0327"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0328",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-172670415",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0328"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0329",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several native functions called by AdvertiseManager.java, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-171400004",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0329"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0330",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11 Android ID: A-170732441",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0330"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0331",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-170731783",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0331"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0333",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-168504491",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0333"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0334",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-163358811",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0334"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0336",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-158219161",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0336"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0337",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-157474195",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0337"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0339",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-8.1, Android-9 Android ID: A-145728687",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0339"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0341",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-171980069",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0341"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0390",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174749461",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0390"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0391",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-172841550",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0391"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0392",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-175124730",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0392"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0393",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-168041375",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0393"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0394",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-172655291",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0394"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0396",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-160610106",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0396"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0397",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174052148",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0397"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0399",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-176919394References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0399"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0400",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11 Android ID: A-177561690",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0400"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0429",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-175074139",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0429"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0431",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174149901",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0431"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0433",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-171221090",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0433"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0434",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, a phishing attack is possible allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-167403112",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0434"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0435",
      "cwe": {
        "id": "CWE-665",
        "name": "Improper Initialization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174150451",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0435"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0436",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out-of-bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-176496160",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0436"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0437",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-176168330",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0437"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0438",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10 Android ID: A-152064592",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0438"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0443",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-170474245",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0443"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0444",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-178825358",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0444"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0471",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-176444786",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0471"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0473",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-179687208",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0473"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0474",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-177611958",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0474"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0476",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-169252501",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0476"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0478",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-169255797",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0478"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0480",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-174493336",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0480"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0481",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-172939189",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0481"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0484",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-173720767",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0484"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0506",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-181962311",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0506"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0507",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-181860042",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0507"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0508",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-176444154",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0508"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0509",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-176444161",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0509"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0510",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-176444622",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0510"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0511",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11 Android ID: A-178055795",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0511"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0512",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-173843328References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0512"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0513",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation. This could lead to local escalation of privilege via hidden services with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-156090809",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0513"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0514",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-9, Android-11, Android-8.1 Android ID: A-162604069",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0514"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0515",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-167389063",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0515"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0516",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out-of-bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-181660448",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0516"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0519",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-176533109",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0519"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0520",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-10 Android ID: A-176237595",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0520"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0521",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174661955",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0521"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0522",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out-of-bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-174182139",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0522"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0584",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyBufferObject of Parcel.cpp, there is a possible out-of-bounds read due to an improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-179289794",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0584"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0585",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In beginWrite and beginRead of MessageQueueBase.h, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-184963385",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0585"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0586",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-182584940",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0586"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0587",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out-of-bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-185259758",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0587"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0588",
      "cwe": {
        "id": "CWE-668",
        "name": "Exposure of Resource to Wrong Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9 Android ID: A-177238342",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0588"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0589",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-180939982",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0589"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0591",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-179386960",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0591"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0593",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-179386068",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0593"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0594",
      "cwe": {
        "id": "CWE-74",
        "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-176445224",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0594"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0596",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-181346550",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0596"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0597",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-176496502",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0597"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0598",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-180422108",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0598"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0599",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-175614289",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0599"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0600",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-179042963",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0600"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0601",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out-of-bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-180643802",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0601"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0604",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-179910660",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0604"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0640",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In noteAtomLogged of StatsdStats.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-187957589",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0640"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0641",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-185235454",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0641"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0642",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-185126149",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0642"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0646",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sqlite3_str_vappendf of sqlite3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process\u0027s SQL with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-153352319",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0646"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0650",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-190286685",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0650"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0651",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadLabel of PackageItemInfo.java, there is a possible way to cause a denial of service in a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-67013844",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0651"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0652",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing objects that are not thread-safe. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-185178568",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0652"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0653",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-177931370",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0653"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0682",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-159624555",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0682"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0683",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runTraceIpcStop of ActivityManagerShellCommand.java, deletion of system files is possible due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-185398942",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0683"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0684",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out-of-bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-179839665",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0684"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0687",
      "cwe": {
        "id": "CWE-834",
        "name": "Excessive Iteration"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-188913943",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0687"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0688",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-161149543",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0688"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0689",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-190188264",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0689"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0690",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out-of-bounds write due to heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-182152757",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0690"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0692",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-179289753",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0692"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0695",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get_sock_stat of xt_qtaguid.c, there is a possible out-of-bounds read due to a use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-184018316References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0695"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0704",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-179338675",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0704"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0706",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android Versions: Android-10 Android-11Android ID: A-193444889",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0706"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0708",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runDumpHeap of ActivityManagerShellCommand.java, deletion of system files is possible due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-183262161",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0708"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0870",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RW_SetActivatedTagType of rw_main.cc, memory corruption is possible due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-192472262",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0870"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0919",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-197336441",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0919"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0920",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-196926917References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0920"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0926",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-191053931",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0926"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0928",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-188675581",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0928"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0929",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-187527909 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0929"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0930",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-181660091",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0930"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0931",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-180747689",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0931"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0933",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetooth device, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-172251622",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0933"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0952",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user\u0027s contacts with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-195748381",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0952"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0953",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-184046278",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0953"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0961",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-196046570References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0961"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0963",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-199754277",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0963"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0964",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-193363621",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0964"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0965",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-194300867",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0965"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0967",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In vorbis_book_decodev_set of codebook.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-199065614",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0967"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0968",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In osi_malloc and osi_calloc of allocator.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-197868577",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0968"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0970",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-196970023",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0970"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-1972",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-1972"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-1976",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-1976"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-29647",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-29647"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-33909",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an out-of-bounds write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-33909"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-38204",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-38204"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39621",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-185126319",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39621"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39623",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doRead of SimpleDecodingSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-194105348",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39623"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39626",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-194695497",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39626"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39627",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-185126549",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39627"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39629",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-197353344",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39629"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39633",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-150694665 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39633"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39634",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-204450605References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39634"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20127",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ce_t4t_data_cback of ce_t4t.cc, there is a possible out-of-bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-221862119",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20127"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20130",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-224314979",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20130"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20227",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In USB driver, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-216825460 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20227"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20229",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-224536184",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20229"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20355",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-219498290",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20355"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20411",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avdt_msg_asmbl of avdt_msg.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-232023771",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20411"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20421",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-239630375 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20421"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20422",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-237540956 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20422"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20423",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rndis_set_response of rndis.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-239842288 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20423"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20462",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-230356196",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20462"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20466",
      "cwe": {
        "id": "CWE-1188",
        "name": "Initialization of a Resource with an Insecure Default"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user\u0027s password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-179725730",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20466"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20468",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BNEP_ConnectResp of bnep_api.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-228450451",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20468"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20469",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-230867224",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20469"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20472",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-239210579",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20472"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20473",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-239267173",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20473"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20476",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-240936919",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20476"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20483",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out-of-bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-242459126",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20483"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20498",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fdt_path_offset_namelen of fdt_ro.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-246465319",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20498"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20500",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-246540168",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20500"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens",
        "summary": "reporting these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Do not click web links or open attachments in unsolicited email messages.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-24-074-07 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-074-07.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-24-074-07 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-07"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Siemens SIMATIC",
    "tracking": {
      "current_release_date": "2024-03-14T06:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-24-074-07",
      "initial_release_date": "2024-03-14T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2024-03-14T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.2",
                "product": {
                  "name": "Siemens SIMATIC RF160B (6GT2003-0FA00): \u003cV2.2",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF160B (6GT2003-0FA00)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash or potentially execute arbitrary code by sending specially crafted DNS responses to the DNSmasq process. In order to exploit this vulnerability, an attacker must be able to trigger DNS requests from the device, and must be in a privileged position to inject malicious DNS responses.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-18509",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-18509"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-0338",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-9 Android ID: A-123700107",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0338"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-0417",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-8.1, Android-9 Android ID: A-154319182",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-0417"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-10768",
      "cwe": {
        "id": "CWE-440",
        "name": "Expected Behavior Violation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being \u0027force disabled\u0027 when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-10768"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-11301",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-11301"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-14305",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An out-of-bounds memory write flaw was found in how the Linux kernel\u0027s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14305"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-14381",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux kernel\u0027s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14381"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-15436",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-15436"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-24587",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-24587"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-25705",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw in ICMP packets in the Linux kernel was found to allow to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well. Kernel versions before 5.10 may be vulnerable to this issue.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-25705"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-26555",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-26555"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-26558",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-26558"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-29660",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-29660"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-29661",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-29661"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0302",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1 Android-9 Android-10Android ID: A-155287782",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0302"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0305",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10 Android ID: A-154015447",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0305"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0325",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-174238784",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0325"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0326",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_copy_client_info of p2p.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi direct search, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-172937525",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0326"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0327",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-172935267",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0327"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0328",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-172670415",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0328"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0329",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several native functions called by AdvertiseManager.java, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-171400004",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0329"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0330",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11 Android ID: A-170732441",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0330"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0331",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-170731783",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0331"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0333",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-168504491",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0333"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0334",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-163358811",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0334"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0336",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-158219161",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0336"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0337",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-157474195",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0337"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0339",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-8.1, Android-9 Android ID: A-145728687",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0339"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0341",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-171980069",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0341"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0390",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174749461",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0390"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0391",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-172841550",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0391"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0392",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-175124730",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0392"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0393",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-168041375",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0393"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0394",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-172655291",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0394"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0396",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-160610106",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0396"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0397",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174052148",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0397"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0399",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-176919394References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0399"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0400",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11 Android ID: A-177561690",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0400"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0429",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-175074139",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0429"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0431",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174149901",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0431"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0433",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-171221090",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0433"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0434",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, a phishing attack is possible allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-167403112",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0434"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0435",
      "cwe": {
        "id": "CWE-665",
        "name": "Improper Initialization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174150451",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0435"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0436",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out-of-bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-176496160",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0436"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0437",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-176168330",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0437"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0438",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10 Android ID: A-152064592",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0438"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0443",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-170474245",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0443"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0444",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-178825358",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0444"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0471",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-176444786",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0471"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0473",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-179687208",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0473"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0474",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-177611958",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0474"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0476",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-169252501",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0476"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0478",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-169255797",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0478"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0480",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-174493336",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0480"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0481",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-172939189",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0481"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0484",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-173720767",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0484"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0506",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-181962311",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0506"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0507",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-181860042",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0507"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0508",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-176444154",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0508"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0509",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-176444161",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0509"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0510",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-176444622",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0510"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0511",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11 Android ID: A-178055795",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0511"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0512",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-173843328References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0512"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0513",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation. This could lead to local escalation of privilege via hidden services with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-156090809",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0513"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0514",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-9, Android-11, Android-8.1 Android ID: A-162604069",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0514"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0515",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-167389063",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0515"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0516",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out-of-bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-181660448",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0516"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0519",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-176533109",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0519"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0520",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-10 Android ID: A-176237595",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0520"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0521",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-174661955",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0521"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0522",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out-of-bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-174182139",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0522"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0584",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyBufferObject of Parcel.cpp, there is a possible out-of-bounds read due to an improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-179289794",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0584"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0585",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In beginWrite and beginRead of MessageQueueBase.h, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-184963385",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0585"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0586",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-182584940",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0586"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0587",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out-of-bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-185259758",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0587"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0588",
      "cwe": {
        "id": "CWE-668",
        "name": "Exposure of Resource to Wrong Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9 Android ID: A-177238342",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0588"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0589",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-180939982",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0589"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0591",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-179386960",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0591"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0593",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-179386068",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0593"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0594",
      "cwe": {
        "id": "CWE-74",
        "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-176445224",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0594"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0596",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-181346550",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0596"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0597",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-176496502",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0597"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0598",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-180422108",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0598"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0599",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-175614289",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0599"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0600",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-179042963",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0600"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0601",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out-of-bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-180643802",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0601"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0604",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-179910660",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0604"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0640",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In noteAtomLogged of StatsdStats.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-187957589",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0640"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0641",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-185235454",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0641"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0642",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-185126149",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0642"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0646",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sqlite3_str_vappendf of sqlite3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process\u0027s SQL with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-153352319",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0646"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0650",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-190286685",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0650"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0651",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadLabel of PackageItemInfo.java, there is a possible way to cause a denial of service in a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-67013844",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0651"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0652",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing objects that are not thread-safe. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.1, Android-9, Android-10, Android-11 Android ID: A-185178568",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0652"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0653",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-177931370",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0653"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0682",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-159624555",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0682"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0683",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runTraceIpcStop of ActivityManagerShellCommand.java, deletion of system files is possible due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-8.1, Android-9, Android-10 Android ID: A-185398942",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0683"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0684",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out-of-bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-179839665",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0684"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0687",
      "cwe": {
        "id": "CWE-834",
        "name": "Excessive Iteration"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-188913943",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0687"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0688",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-161149543",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0688"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0689",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-8.1, Android-9 Android ID: A-190188264",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0689"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0690",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out-of-bounds write due to heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-182152757",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0690"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0692",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-11, Android-9, Android-10 Android ID: A-179289753",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0692"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0695",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get_sock_stat of xt_qtaguid.c, there is a possible out-of-bounds read due to a use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-184018316References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0695"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0704",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-179338675",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0704"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0706",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android Versions: Android-10 Android-11Android ID: A-193444889",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0706"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0708",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runDumpHeap of ActivityManagerShellCommand.java, deletion of system files is possible due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-183262161",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0708"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0870",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RW_SetActivatedTagType of rw_main.cc, memory corruption is possible due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9, Android-10, Android-11, Android-8.1 Android ID: A-192472262",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0870"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0919",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-197336441",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0919"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0920",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-196926917References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0920"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0926",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-191053931",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0926"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0928",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-9 Android ID: A-188675581",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0928"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0929",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-187527909 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0929"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0930",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-181660091",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0930"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0931",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-180747689",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0931"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0933",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetooth device, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-172251622",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0933"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0952",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user\u0027s contacts with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-195748381",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0952"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0953",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-184046278",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0953"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0961",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-196046570References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0961"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0963",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-199754277",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0963"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0964",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-193363621",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0964"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0965",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-194300867",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0965"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0967",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In vorbis_book_decodev_set of codebook.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-199065614",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0967"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0968",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In osi_malloc and osi_calloc of allocator.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-197868577",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0968"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-0970",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-196970023",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-0970"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-1972",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-1972"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-1976",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-1976"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-29647",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-29647"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-33909",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an out-of-bounds write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-33909"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-38204",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-38204"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39621",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-185126319",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39621"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39623",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doRead of SimpleDecodingSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-194105348",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39623"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39626",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-194695497",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39626"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39627",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-185126549",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39627"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39629",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-9 Android ID: A-197353344",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39629"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39633",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-150694665 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39633"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-39634",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-204450605References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39634"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20127",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ce_t4t_data_cback of ce_t4t.cc, there is a possible out-of-bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-221862119",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20127"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20130",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-224314979",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20130"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20227",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In USB driver, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-216825460 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20227"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20229",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-224536184",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20229"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20355",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-219498290",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20355"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20411",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avdt_msg_asmbl of avdt_msg.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-232023771",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20411"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20421",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-239630375 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20421"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20422",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-237540956 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20422"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20423",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rndis_set_response of rndis.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-239842288 References: Upstream kernel",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20423"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20462",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-230356196",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20462"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20466",
      "cwe": {
        "id": "CWE-1188",
        "name": "Initialization of a Resource with an Insecure Default"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user\u0027s password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-179725730",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20466"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20468",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BNEP_ConnectResp of bnep_api.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-228450451",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20468"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20469",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-230867224",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20469"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20472",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-239210579",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20472"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20473",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-239267173",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20473"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20476",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L Android ID: A-240936919",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20476"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20483",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out-of-bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-242459126",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20483"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20498",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fdt_path_offset_namelen of fdt_ro.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-246465319",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20498"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-20500",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10, Android-11, Android-12, Android-12L, Android-13 Android ID: A-246540168",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-20500"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Siemens has released a new version (V2.2) for SIMATIC RF160B and recommends to update to the latest version.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens\u0027 operational guidelines for industrial security and following recommendations in the product manuals.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/cert/operational-guidelines-industrial-security"
        },
        {
          "category": "mitigation",
          "details": "Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.siemens.com/industrialsecurity"
        },
        {
          "category": "mitigation",
          "details": "For more information see the associated Siemens security advisory SSA-770721 in HTML and CSAF.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens Product CERT",
        "summary": "reporting these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow a remote attacker to crash the DNS service or execute arbitrary code by crafting malicious DNS responses.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Chemical, Energy, Food and Agriculture, Healthcare and Public Health, Transportation Systems, and Water and Wastewater Systems",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and \nsolutions, please contact the Siemens ProductCERT:\n\nhttps://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and  solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "other",
        "text": "No known public exploits specifically target these vulnerabilities.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-332-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-332-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-332-01 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-332-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B"
      },
      {
        "category": "external",
        "summary": "SSA-496604: SSA-689071: DNSMasq Vulnerabilities in SCALANCE W1750D, SCALANCE M-800 / S615 and RUGGEDCOM RM1224 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/SSA-689071.txt"
      }
    ],
    "title": "Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)",
    "tracking": {
      "current_release_date": "2020-10-13T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-17-332-01",
      "initial_release_date": "2017-11-28T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-11-28T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-332-01 Siemens SCALANCE W1750D, M800, and S615"
        },
        {
          "date": "2018-04-05T00:00:00.000000Z",
          "legacy_version": "A",
          "number": "2",
          "summary": "ICSA-17-332-01 Siemens SIMATIC SCALANCE W1750D, M800, and S615 (Update A)"
        },
        {
          "date": "2018-05-10T00:00:00.000000Z",
          "legacy_version": "B",
          "number": "3",
          "summary": "ICSA-17-332-01 Siemens SCALANCE W1750D, M800, and S615 (Update B)"
        },
        {
          "date": "2020-10-13T00:00:00.000000Z",
          "legacy_version": "C",
          "number": "4",
          "summary": "ICSA-17-332-01 Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V5.0",
                "product": {
                  "name": "RUGGEDCOM RM1224: All versions \u003c V5.0",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RM1224"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V5.0",
                "product": {
                  "name": "SCALANCE M-800 / S615: All versions \u003c V5.0",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE M-800 / S615"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V6.5.1.5",
                "product": {
                  "name": "SCALANCE W1750D: All versions \u003c V6.5.1.5",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W1750D"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13704",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13704"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14495"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14496"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash or potentially execute arbitrary code by sending specially crafted DNS responses to the DNSmasq process. In order to exploit this vulnerability, an attacker must be able to trigger DNS requests from the device, and must be in a privileged position to inject malicious DNS responses.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-14495",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2017-14496",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash of the DNSmasq process by sending specially crafted request messages to the service on port 53/udp.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://support.industry.siemens.com/cs/ww/en/view/109778052",
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the\ndevice configuration (System - DNS - DNS Proxy - Disable Checkbox\n\u201eEnable DNS Proxy\"), and configure the connected devices in the internal\nnetwork to use a different DNS server",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "SCALANCE W1750D: If \"OpenDNS\", \"Captive Portal\" or \"URL redirection\"\nfunctionality is not used, deploy firewall rules in the device\nconfiguration to block incoming access to port 53/UDP",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V5.0 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109757544 ",
          "product_ids": [
            "CSAFPID-0002"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109757544"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V6.5.1.5 or later version - Download: https://support.industry.siemens.com/cs/ww/en/view/109778052 ",
          "product_ids": [
            "CSAFPID-0003"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109778052"
        },
        {
          "category": "mitigation",
          "details": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for dnsmasq is now available for Red Hat Enterprise Linux 6.2 Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise Linux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco Extended Update Support, and Red Hat Enterprise Linux 6.7 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. (CVE-2017-14491)\n\nRed Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. Serna (Google Security Team), Gabriel Campana (Google Security Team), Kevin Hamacher (Google Security Team), and Ron Bowes (Google Security Team) for reporting this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2839",
        "url": "https://access.redhat.com/errata/RHSA-2017:2839"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
        "url": "https://access.redhat.com/security/vulnerabilities/3199382"
      },
      {
        "category": "external",
        "summary": "1495409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2839.json"
      }
    ],
    "title": "Red Hat Security Advisory: dnsmasq security update",
    "tracking": {
      "current_release_date": "2024-11-22T11:34:20+00:00",
      "generator": {
        "date": "2024-11-22T11:34:20+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2017:2839",
      "initial_release_date": "2017-10-02T17:07:36+00:00",
      "revision_history": [
        {
          "date": "2017-10-02T17:07:36+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-02T17:07:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T11:34:20+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 6.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 6.4)",
                  "product_id": "6Server-6.4.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:6.4::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.4)",
                  "product_id": "6Server-optional-6.4.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:6.4::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 6.5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 6.5)",
                  "product_id": "6Server-6.5.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:6.5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.5)",
                  "product_id": "6Server-optional-6.5.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:6.5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server TUS (v. 6.5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server TUS (v. 6.5)",
                  "product_id": "6Server-6.5.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:6.5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional TUS (v. 6.5)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional TUS (v. 6.5)",
                  "product_id": "6Server-optional-6.5.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:6.5::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 6.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 6.6)",
                  "product_id": "6Server-6.6.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:6.6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional AUS (v. 6.6)",
                  "product_id": "6Server-optional-6.6.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:6.6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server TUS (v. 6.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server TUS (v. 6.6)",
                  "product_id": "6Server-6.6.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:6.6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional TUS (v. 6.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional TUS (v. 6.6)",
                  "product_id": "6Server-optional-6.6.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_tus:6.6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
                  "product_id": "6ComputeNode-6.7.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:6.7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
                  "product_id": "6ComputeNode-optional-6.7.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:6.7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server EUS (v. 6.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server EUS (v. 6.7)",
                  "product_id": "6Server-6.7.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:6.7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
                  "product_id": "6Server-optional-6.7.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:6.7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 6.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 6.2)",
                  "product_id": "6Server-6.2.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_mission_critical:6.2::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-13.el6_4.1.src",
                "product": {
                  "name": "dnsmasq-0:2.48-13.el6_4.1.src",
                  "product_id": "dnsmasq-0:2.48-13.el6_4.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-13.el6_4.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-13.el6_5.1.src",
                "product": {
                  "name": "dnsmasq-0:2.48-13.el6_5.1.src",
                  "product_id": "dnsmasq-0:2.48-13.el6_5.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-13.el6_5.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-14.el6_6.1.src",
                "product": {
                  "name": "dnsmasq-0:2.48-14.el6_6.1.src",
                  "product_id": "dnsmasq-0:2.48-14.el6_6.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-14.el6_6.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-16.el6_7.1.src",
                "product": {
                  "name": "dnsmasq-0:2.48-16.el6_7.1.src",
                  "product_id": "dnsmasq-0:2.48-16.el6_7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-16.el6_7.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-5.el6_2.2.src",
                "product": {
                  "name": "dnsmasq-0:2.48-5.el6_2.2.src",
                  "product_id": "dnsmasq-0:2.48-5.el6_2.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-5.el6_2.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
                  "product_id": "dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-13.el6_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-13.el6_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-13.el6_4.1.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.48-13.el6_4.1.x86_64",
                  "product_id": "dnsmasq-0:2.48-13.el6_4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-13.el6_4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-13.el6_5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
                  "product_id": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-13.el6_5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-13.el6_5.1.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.48-13.el6_5.1.x86_64",
                  "product_id": "dnsmasq-0:2.48-13.el6_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-13.el6_5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
                  "product_id": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-14.el6_6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-14.el6_6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-14.el6_6.1.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.48-14.el6_6.1.x86_64",
                  "product_id": "dnsmasq-0:2.48-14.el6_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-14.el6_6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-16.el6_7.1.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.48-16.el6_7.1.x86_64",
                  "product_id": "dnsmasq-0:2.48-16.el6_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-16.el6_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-16.el6_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
                  "product_id": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-16.el6_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-5.el6_2.2.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.48-5.el6_2.2.x86_64",
                  "product_id": "dnsmasq-0:2.48-5.el6_2.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-5.el6_2.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-5.el6_2.2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
                  "product_id": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-16.el6_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
                  "product_id": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-16.el6_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-16.el6_7.1.s390x",
                "product": {
                  "name": "dnsmasq-0:2.48-16.el6_7.1.s390x",
                  "product_id": "dnsmasq-0:2.48-16.el6_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-16.el6_7.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
                  "product_id": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-16.el6_7.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-16.el6_7.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-16.el6_7.1.ppc64",
                "product": {
                  "name": "dnsmasq-0:2.48-16.el6_7.1.ppc64",
                  "product_id": "dnsmasq-0:2.48-16.el6_7.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-16.el6_7.1?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-16.el6_7.1.i686",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-16.el6_7.1.i686",
                  "product_id": "dnsmasq-utils-0:2.48-16.el6_7.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-16.el6_7.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
                  "product_id": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-16.el6_7.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-16.el6_7.1.i686",
                "product": {
                  "name": "dnsmasq-0:2.48-16.el6_7.1.i686",
                  "product_id": "dnsmasq-0:2.48-16.el6_7.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-16.el6_7.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.src as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.src",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.7)",
          "product_id": "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.src as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)",
          "product_id": "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-5.el6_2.2.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
          "product_id": "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.src"
        },
        "product_reference": "dnsmasq-0:2.48-5.el6_2.2.src",
        "relates_to_product_reference": "6Server-6.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-5.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
          "product_id": "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-5.el6_2.2.x86_64",
        "relates_to_product_reference": "6Server-6.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)",
          "product_id": "6Server-6.2.AUS:dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64",
        "relates_to_product_reference": "6Server-6.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_4.1.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)",
          "product_id": "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_4.1.src",
        "relates_to_product_reference": "6Server-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_4.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)",
          "product_id": "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_4.1.x86_64",
        "relates_to_product_reference": "6Server-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)",
          "product_id": "6Server-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
        "relates_to_product_reference": "6Server-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-13.el6_4.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)",
          "product_id": "6Server-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
        "relates_to_product_reference": "6Server-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)",
          "product_id": "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.src",
        "relates_to_product_reference": "6Server-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)",
          "product_id": "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)",
          "product_id": "6Server-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)",
          "product_id": "6Server-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.src as a component of Red Hat Enterprise Linux Server TUS (v. 6.5)",
          "product_id": "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.src",
        "relates_to_product_reference": "6Server-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 6.5)",
          "product_id": "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 6.5)",
          "product_id": "6Server-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 6.5)",
          "product_id": "6Server-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.6)",
          "product_id": "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.src",
        "relates_to_product_reference": "6Server-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.6)",
          "product_id": "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.6)",
          "product_id": "6Server-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.6)",
          "product_id": "6Server-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.src as a component of Red Hat Enterprise Linux Server TUS (v. 6.6)",
          "product_id": "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.src",
        "relates_to_product_reference": "6Server-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 6.6)",
          "product_id": "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 6.6)",
          "product_id": "6Server-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 6.6)",
          "product_id": "6Server-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.src as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.src",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.7)",
          "product_id": "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6Server-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_4.1.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)",
          "product_id": "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_4.1.src",
        "relates_to_product_reference": "6Server-optional-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_4.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)",
          "product_id": "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_4.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)",
          "product_id": "6Server-optional-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-13.el6_4.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)",
          "product_id": "6Server-optional-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.4.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.src",
        "relates_to_product_reference": "6Server-optional-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.src as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.src",
        "relates_to_product_reference": "6Server-optional-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.5)",
          "product_id": "6Server-optional-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.5.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.src",
        "relates_to_product_reference": "6Server-optional-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.src as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.src",
        "relates_to_product_reference": "6Server-optional-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 6.6)",
          "product_id": "6Server-optional-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.6.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.src",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.i686",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 6.7)",
          "product_id": "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
        "relates_to_product_reference": "6Server-optional-6.7.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the code responsible for building DNS replies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
          "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
          "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
          "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
          "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
          "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
          "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
          "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
          "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
          "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
          "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
          "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
          "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
          "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
          "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.src",
          "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.x86_64",
          "6Server-6.2.AUS:dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64",
          "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src",
          "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64",
          "6Server-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
          "6Server-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
          "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src",
          "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
          "6Server-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
          "6Server-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
          "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src",
          "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
          "6Server-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
          "6Server-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
          "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src",
          "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
          "6Server-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
          "6Server-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
          "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src",
          "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
          "6Server-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
          "6Server-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
          "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
          "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
          "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
          "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
          "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
          "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
          "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
          "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
          "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
          "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
          "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
          "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
          "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
          "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src",
          "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64",
          "6Server-optional-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
          "6Server-optional-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
          "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src",
          "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
          "6Server-optional-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
          "6Server-optional-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
          "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src",
          "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
          "6Server-optional-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
          "6Server-optional-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
          "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src",
          "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
          "6Server-optional-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
          "6Server-optional-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
          "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src",
          "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
          "6Server-optional-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
          "6Server-optional-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
          "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
          "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
          "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
          "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
          "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
          "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
          "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
          "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
          "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
          "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
          "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
          "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
          "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T17:07:36+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
            "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.src",
            "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.x86_64",
            "6Server-6.2.AUS:dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64",
            "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src",
            "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64",
            "6Server-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
            "6Server-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
            "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
            "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src",
            "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64",
            "6Server-optional-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
            "6Server-optional-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
            "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2839"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6ComputeNode-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6ComputeNode-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
            "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.src",
            "6Server-6.2.AUS:dnsmasq-0:2.48-5.el6_2.2.x86_64",
            "6Server-6.2.AUS:dnsmasq-debuginfo-0:2.48-5.el6_2.2.x86_64",
            "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src",
            "6Server-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64",
            "6Server-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
            "6Server-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
            "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6Server-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6Server-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6Server-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64",
            "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.src",
            "6Server-optional-6.4.AUS:dnsmasq-0:2.48-13.el6_4.1.x86_64",
            "6Server-optional-6.4.AUS:dnsmasq-debuginfo-0:2.48-13.el6_4.1.x86_64",
            "6Server-optional-6.4.AUS:dnsmasq-utils-0:2.48-13.el6_4.1.x86_64",
            "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-optional-6.5.AUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.AUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.AUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.src",
            "6Server-optional-6.5.TUS:dnsmasq-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.TUS:dnsmasq-debuginfo-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.5.TUS:dnsmasq-utils-0:2.48-13.el6_5.1.x86_64",
            "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-optional-6.6.AUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.AUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.AUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.src",
            "6Server-optional-6.6.TUS:dnsmasq-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.TUS:dnsmasq-debuginfo-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.6.TUS:dnsmasq-utils-0:2.48-14.el6_6.1.x86_64",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.i686",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.ppc64",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.s390x",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.src",
            "6Server-optional-6.7.EUS:dnsmasq-0:2.48-16.el6_7.1.x86_64",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.i686",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.ppc64",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.s390x",
            "6Server-optional-6.7.EUS:dnsmasq-debuginfo-0:2.48-16.el6_7.1.x86_64",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.i686",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.ppc64",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.s390x",
            "6Server-optional-6.7.EUS:dnsmasq-utils-0:2.48-16.el6_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the code responsible for building DNS replies"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for dnsmasq is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. (CVE-2017-14491)\n\n* A heap buffer overflow was discovered in dnsmasq in the IPv6 router advertisement (RA) handling code. An attacker on the local network segment could send crafted RAs to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. This issue only affected configurations using one of these options: enable-ra, ra-only, slaac, ra-names, ra-advrouter, or ra-stateless. (CVE-2017-14492)\n\n* A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code. (CVE-2017-14493)\n\n* An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data. (CVE-2017-14494)\n\n* A memory exhaustion flaw was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets which would trigger memory allocations which would never be freed, leading to unbounded memory consumption and eventually a crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet. (CVE-2017-14495)\n\n* An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet. (CVE-2017-14496)\n\nRed Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. Serna (Google Security Team), Gabriel Campana (Google Security Team), Kevin Hamacher (Google Security Team), and Ron Bowes (Google Security Team) for reporting these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2836",
        "url": "https://access.redhat.com/errata/RHSA-2017:2836"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
        "url": "https://access.redhat.com/security/vulnerabilities/3199382"
      },
      {
        "category": "external",
        "summary": "1495409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
      },
      {
        "category": "external",
        "summary": "1495410",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495410"
      },
      {
        "category": "external",
        "summary": "1495411",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495411"
      },
      {
        "category": "external",
        "summary": "1495412",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495412"
      },
      {
        "category": "external",
        "summary": "1495415",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495415"
      },
      {
        "category": "external",
        "summary": "1495416",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495416"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2836.json"
      }
    ],
    "title": "Red Hat Security Advisory: dnsmasq security update",
    "tracking": {
      "current_release_date": "2024-11-22T11:34:05+00:00",
      "generator": {
        "date": "2024-11-22T11:34:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2017:2836",
      "initial_release_date": "2017-10-02T17:18:46+00:00",
      "revision_history": [
        {
          "date": "2017-10-02T17:18:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-02T17:18:46+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T11:34:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client (v. 7)",
                  "product_id": "7Client-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                  "product_id": "7Client-optional-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                  "product_id": "7ComputeNode-optional-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                  "product_id": "7Workstation-optional-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
                  "product_id": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.76-2.el7_4.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.76-2.el7_4.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
                  "product_id": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.76-2.el7_4.2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.76-2.el7_4.2.src",
                "product": {
                  "name": "dnsmasq-0:2.76-2.el7_4.2.src",
                  "product_id": "dnsmasq-0:2.76-2.el7_4.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.76-2.el7_4.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
                "product": {
                  "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
                  "product_id": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.76-2.el7_4.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
                  "product_id": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.76-2.el7_4.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
                "product": {
                  "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
                  "product_id": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.76-2.el7_4.2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
                "product": {
                  "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
                  "product_id": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.76-2.el7_4.2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
                  "product_id": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.76-2.el7_4.2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
                "product": {
                  "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
                  "product_id": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.76-2.el7_4.2?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.76-2.el7_4.2.s390x",
                "product": {
                  "name": "dnsmasq-0:2.76-2.el7_4.2.s390x",
                  "product_id": "dnsmasq-0:2.76-2.el7_4.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.76-2.el7_4.2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
                  "product_id": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.76-2.el7_4.2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
                "product": {
                  "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
                  "product_id": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.76-2.el7_4.2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
                "product": {
                  "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
                  "product_id": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.76-2.el7_4.2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
                  "product_id": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.76-2.el7_4.2?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Client-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Client-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Server-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Workstation-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.src",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
        "relates_to_product_reference": "7Workstation-optional-7.4.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the code responsible for building DNS replies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T17:18:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2836"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the code responsible for building DNS replies"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14492",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495410"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was discovered in dnsmasq in the IPv6 router advertisement (RA) handling code. An attacker on the local network segment could send crafted RAs to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. This issue only affected configurations using one of these options: enable-ra, ra-only, slaac, ra-names, ra-advrouter, or ra-stateless.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the IPv6 router advertisement code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14492"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495410",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495410"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T17:18:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2836"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the IPv6 router advertisement code"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14493",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495411"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: stack buffer overflow in the DHCPv6 code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14493"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495411",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495411"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14493",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14493"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14493",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T17:18:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2836"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: stack buffer overflow in the DHCPv6 code"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14494",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495412"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: information leak in the DHCPv6 relay code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14494"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495412",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495412"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14494"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T17:18:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2836"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.8,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dnsmasq: information leak in the DHCPv6 relay code"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14495",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495415"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory exhaustion flaw was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets which would trigger memory allocations which would never be freed, leading to unbounded memory consumption and eventually a crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: memory exhaustion vulnerability in the EDNS0 code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14495"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495415",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495415"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14495",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14495"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14495",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14495"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T17:18:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2836"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dnsmasq: memory exhaustion vulnerability in the EDNS0 code"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14496",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495416"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer underflow flaw leading to a buffer over-read was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash. This issue only affected configurations using one of the options: add-mac, add-cpe-id, or add-subnet.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: integer underflow leading to buffer over-read in the EDNS0 code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
          "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
          "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14496"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495416",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495416"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14496",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14496"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14496",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14496"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T17:18:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2836"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Client-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Client-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7ComputeNode-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7ComputeNode-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Server-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Server-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.src",
            "7Workstation-optional-7.4.Z:dnsmasq-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-debuginfo-0:2.76-2.el7_4.2.x86_64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.aarch64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.ppc64le",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.s390x",
            "7Workstation-optional-7.4.Z:dnsmasq-utils-0:2.76-2.el7_4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dnsmasq: integer underflow leading to buffer over-read in the EDNS0 code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for dnsmasq is now available for Red Hat Enterprise Linux 5.9 Long Life.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. (CVE-2017-14491)\n\nRed Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. Serna (Google Security Team), Gabriel Campana (Google Security Team), Kevin Hamacher (Google Security Team), and Ron Bowes (Google Security Team) for reporting this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2841",
        "url": "https://access.redhat.com/errata/RHSA-2017:2841"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
        "url": "https://access.redhat.com/security/vulnerabilities/3199382"
      },
      {
        "category": "external",
        "summary": "1495409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2841.json"
      }
    ],
    "title": "Red Hat Security Advisory: dnsmasq security update",
    "tracking": {
      "current_release_date": "2024-11-22T11:34:31+00:00",
      "generator": {
        "date": "2024-11-22T11:34:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2017:2841",
      "initial_release_date": "2017-10-02T15:53:55+00:00",
      "revision_history": [
        {
          "date": "2017-10-02T15:53:55+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-02T15:53:55+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T11:34:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Long Life (v. 5.9 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux Long Life (v. 5.9 server)",
                  "product_id": "5Server-5.9.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:5.9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.45-2.el5_9.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.45-2.el5_9.1.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.45-2.el5_9.1.x86_64",
                  "product_id": "dnsmasq-0:2.45-2.el5_9.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.45-2.el5_9.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386",
                  "product_id": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.45-2.el5_9.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.45-2.el5_9.1.i386",
                "product": {
                  "name": "dnsmasq-0:2.45-2.el5_9.1.i386",
                  "product_id": "dnsmasq-0:2.45-2.el5_9.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.45-2.el5_9.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.45-2.el5_9.1.src",
                "product": {
                  "name": "dnsmasq-0:2.45-2.el5_9.1.src",
                  "product_id": "dnsmasq-0:2.45-2.el5_9.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.45-2.el5_9.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.45-2.el5_9.1.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)",
          "product_id": "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.i386"
        },
        "product_reference": "dnsmasq-0:2.45-2.el5_9.1.i386",
        "relates_to_product_reference": "5Server-5.9.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.45-2.el5_9.1.src as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)",
          "product_id": "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.src"
        },
        "product_reference": "dnsmasq-0:2.45-2.el5_9.1.src",
        "relates_to_product_reference": "5Server-5.9.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.45-2.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)",
          "product_id": "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.45-2.el5_9.1.x86_64",
        "relates_to_product_reference": "5Server-5.9.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)",
          "product_id": "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386",
        "relates_to_product_reference": "5Server-5.9.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)",
          "product_id": "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64",
        "relates_to_product_reference": "5Server-5.9.AUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the code responsible for building DNS replies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.i386",
          "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.src",
          "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.x86_64",
          "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386",
          "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T15:53:55+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.i386",
            "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.src",
            "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.x86_64",
            "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386",
            "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2841"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.i386",
            "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.src",
            "5Server-5.9.AUS:dnsmasq-0:2.45-2.el5_9.1.x86_64",
            "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.i386",
            "5Server-5.9.AUS:dnsmasq-debuginfo-0:2.45-2.el5_9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the code responsible for building DNS replies"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for dnsmasq is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. (CVE-2017-14491)\n\nRed Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. Serna (Google Security Team), Gabriel Campana (Google Security Team), Kevin Hamacher (Google Security Team), and Ron Bowes (Google Security Team) for reporting this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2838",
        "url": "https://access.redhat.com/errata/RHSA-2017:2838"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
        "url": "https://access.redhat.com/security/vulnerabilities/3199382"
      },
      {
        "category": "external",
        "summary": "1495409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2838.json"
      }
    ],
    "title": "Red Hat Security Advisory: dnsmasq security update",
    "tracking": {
      "current_release_date": "2024-11-22T11:34:15+00:00",
      "generator": {
        "date": "2024-11-22T11:34:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2017:2838",
      "initial_release_date": "2017-10-02T16:23:56+00:00",
      "revision_history": [
        {
          "date": "2017-10-02T16:23:56+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-02T16:23:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T11:34:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                  "product_id": "6Client-optional-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node (v. 6)",
                  "product_id": "6ComputeNode-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                  "product_id": "6Workstation-optional-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-18.el6_9.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.48-18.el6_9.x86_64",
                  "product_id": "dnsmasq-0:2.48-18.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-18.el6_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-18.el6_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
                  "product_id": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-18.el6_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-18.el6_9.src",
                "product": {
                  "name": "dnsmasq-0:2.48-18.el6_9.src",
                  "product_id": "dnsmasq-0:2.48-18.el6_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-18.el6_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-18.el6_9.i686",
                "product": {
                  "name": "dnsmasq-0:2.48-18.el6_9.i686",
                  "product_id": "dnsmasq-0:2.48-18.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-18.el6_9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
                  "product_id": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-18.el6_9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-18.el6_9.i686",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-18.el6_9.i686",
                  "product_id": "dnsmasq-utils-0:2.48-18.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-18.el6_9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
                  "product_id": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-18.el6_9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
                  "product_id": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-18.el6_9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-18.el6_9.s390x",
                "product": {
                  "name": "dnsmasq-0:2.48-18.el6_9.s390x",
                  "product_id": "dnsmasq-0:2.48-18.el6_9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-18.el6_9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
                  "product_id": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.48-18.el6_9?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
                "product": {
                  "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
                  "product_id": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.48-18.el6_9?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.48-18.el6_9.ppc64",
                "product": {
                  "name": "dnsmasq-0:2.48-18.el6_9.ppc64",
                  "product_id": "dnsmasq-0:2.48-18.el6_9.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.48-18.el6_9?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Client-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
          "product_id": "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6ComputeNode-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Server-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.src",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.i686",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.48-18.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.48-18.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.9.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the code responsible for building DNS replies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
          "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
          "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
          "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
          "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
          "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
          "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
          "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
          "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
          "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
          "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
          "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
          "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
          "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
          "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
          "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
          "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
          "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
          "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
          "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T16:23:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2838"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Client-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Client-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Client-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Client-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Client-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Client-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6ComputeNode-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6ComputeNode-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6ComputeNode-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6ComputeNode-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6ComputeNode-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6ComputeNode-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Server-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Server-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Server-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Server-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Server-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Server-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Workstation-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Workstation-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Workstation-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.i686",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.ppc64",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.s390x",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.src",
            "6Workstation-optional-6.9.z:dnsmasq-0:2.48-18.el6_9.x86_64",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.i686",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.ppc64",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.s390x",
            "6Workstation-optional-6.9.z:dnsmasq-debuginfo-0:2.48-18.el6_9.x86_64",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.i686",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.ppc64",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.s390x",
            "6Workstation-optional-6.9.z:dnsmasq-utils-0:2.48-18.el6_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the code responsible for building DNS replies"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for dnsmasq is now available for Red Hat Enterprise Linux 7.2 Extended Update Support and Red Hat Enterprise Linux 7.3 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. (CVE-2017-14491)\n\n* A heap buffer overflow was discovered in dnsmasq in the IPv6 router advertisement (RA) handling code. An attacker on the local network segment could send crafted RAs to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. This issue only affected configurations using one of these options: enable-ra, ra-only, slaac, ra-names, ra-advrouter, or ra-stateless. (CVE-2017-14492)\n\n* A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code. (CVE-2017-14493)\n\n* An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data. (CVE-2017-14494)\n\nRed Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. Serna (Google Security Team), Gabriel Campana (Google Security Team), Kevin Hamacher (Google Security Team), and Ron Bowes (Google Security Team) for reporting these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2837",
        "url": "https://access.redhat.com/errata/RHSA-2017:2837"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
        "url": "https://access.redhat.com/security/vulnerabilities/3199382"
      },
      {
        "category": "external",
        "summary": "1495409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
      },
      {
        "category": "external",
        "summary": "1495410",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495410"
      },
      {
        "category": "external",
        "summary": "1495411",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495411"
      },
      {
        "category": "external",
        "summary": "1495412",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495412"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2837.json"
      }
    ],
    "title": "Red Hat Security Advisory: dnsmasq security update",
    "tracking": {
      "current_release_date": "2024-11-22T11:34:10+00:00",
      "generator": {
        "date": "2024-11-22T11:34:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2017:2837",
      "initial_release_date": "2017-10-02T16:19:55+00:00",
      "revision_history": [
        {
          "date": "2017-10-02T16:19:55+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-02T16:19:55+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T11:34:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
                  "product_id": "7ComputeNode-7.2.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.2::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
                  "product_id": "7ComputeNode-optional-7.2.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.2::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server EUS (v. 7.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server EUS (v. 7.2)",
                  "product_id": "7Server-7.2.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.2::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
                  "product_id": "7Server-optional-7.2.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.2::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
                  "product_id": "7ComputeNode-7.3.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.3::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
                  "product_id": "7ComputeNode-optional-7.3.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.3::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server EUS (v. 7.3)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server EUS (v. 7.3)",
                  "product_id": "7Server-7.3.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.3::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
                  "product_id": "7Server-optional-7.3.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:7.3::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-14.el7_2.2.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.66-14.el7_2.2.x86_64",
                  "product_id": "dnsmasq-0:2.66-14.el7_2.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-14.el7_2.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-14.el7_2.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
                  "product_id": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-14.el7_2.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-21.el7_3.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-21.el7_3.2.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.66-21.el7_3.2.x86_64",
                  "product_id": "dnsmasq-0:2.66-21.el7_3.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-21.el7_3.2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
                  "product_id": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-21.el7_3.2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-14.el7_2.2.src",
                "product": {
                  "name": "dnsmasq-0:2.66-14.el7_2.2.src",
                  "product_id": "dnsmasq-0:2.66-14.el7_2.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-14.el7_2.2?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-21.el7_3.2.src",
                "product": {
                  "name": "dnsmasq-0:2.66-21.el7_3.2.src",
                  "product_id": "dnsmasq-0:2.66-21.el7_3.2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-21.el7_3.2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
                  "product_id": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-14.el7_2.2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
                  "product_id": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-14.el7_2.2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-14.el7_2.2.s390x",
                "product": {
                  "name": "dnsmasq-0:2.66-14.el7_2.2.s390x",
                  "product_id": "dnsmasq-0:2.66-14.el7_2.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-14.el7_2.2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
                  "product_id": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-21.el7_3.2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
                  "product_id": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-21.el7_3.2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-21.el7_3.2.s390x",
                "product": {
                  "name": "dnsmasq-0:2.66-21.el7_3.2.s390x",
                  "product_id": "dnsmasq-0:2.66-21.el7_3.2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-21.el7_3.2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
                  "product_id": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-14.el7_2.2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
                  "product_id": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-14.el7_2.2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64",
                "product": {
                  "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64",
                  "product_id": "dnsmasq-0:2.66-14.el7_2.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-14.el7_2.2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
                  "product_id": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-21.el7_3.2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
                  "product_id": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-21.el7_3.2?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64",
                "product": {
                  "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64",
                  "product_id": "dnsmasq-0:2.66-21.el7_3.2.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-21.el7_3.2?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
                  "product_id": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-14.el7_2.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
                  "product_id": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-14.el7_2.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64le",
                "product": {
                  "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64le",
                  "product_id": "dnsmasq-0:2.66-14.el7_2.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-14.el7_2.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
                "product": {
                  "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
                  "product_id": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-utils@2.66-21.el7_3.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
                  "product_id": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.66-21.el7_3.2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64le",
                "product": {
                  "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64le",
                  "product_id": "dnsmasq-0:2.66-21.el7_3.2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.66-21.el7_3.2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.src",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.2)",
          "product_id": "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.src",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)",
          "product_id": "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.src",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2)",
          "product_id": "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.src",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)",
          "product_id": "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7ComputeNode-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.src",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.2)",
          "product_id": "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7Server-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.src",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)",
          "product_id": "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7Server-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.src",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.src",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)",
          "product_id": "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        },
        "product_reference": "dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
        "relates_to_product_reference": "7Server-optional-7.3.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the code responsible for building DNS replies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T16:19:55+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2837"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the code responsible for building DNS replies"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14492",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495410"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was discovered in dnsmasq in the IPv6 router advertisement (RA) handling code. An attacker on the local network segment could send crafted RAs to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. This issue only affected configurations using one of these options: enable-ra, ra-only, slaac, ra-names, ra-advrouter, or ra-stateless.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the IPv6 router advertisement code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14492"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495410",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495410"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14492",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14492"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14492",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T16:19:55+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2837"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the IPv6 router advertisement code"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14493",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495411"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: stack buffer overflow in the DHCPv6 code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14493"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495411",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495411"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14493",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14493"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14493",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T16:19:55+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2837"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: stack buffer overflow in the DHCPv6 code"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14494",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495412"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: information leak in the DHCPv6 relay code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
          "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
          "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
          "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
          "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14494"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495412",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495412"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14494"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T16:19:55+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2837"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 7.8,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7ComputeNode-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7ComputeNode-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.src",
            "7Server-optional-7.2.EUS:dnsmasq-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-debuginfo-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.ppc64le",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.s390x",
            "7Server-optional-7.2.EUS:dnsmasq-utils-0:2.66-14.el7_2.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.src",
            "7Server-optional-7.3.EUS:dnsmasq-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-debuginfo-0:2.66-21.el7_3.2.x86_64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.ppc64le",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.s390x",
            "7Server-optional-7.3.EUS:dnsmasq-utils-0:2.66-21.el7_3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dnsmasq: information leak in the DHCPv6 relay code"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for dnsmasq is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.\n\nSecurity Fix(es):\n\n* A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. (CVE-2017-14491)\n\nRed Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. Serna (Google Security Team), Gabriel Campana (Google Security Team), Kevin Hamacher (Google Security Team), and Ron Bowes (Google Security Team) for reporting this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:2840",
        "url": "https://access.redhat.com/errata/RHSA-2017:2840"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
        "url": "https://access.redhat.com/security/vulnerabilities/3199382"
      },
      {
        "category": "external",
        "summary": "1495409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2840.json"
      }
    ],
    "title": "Red Hat Security Advisory: dnsmasq security update",
    "tracking": {
      "current_release_date": "2024-11-22T11:34:26+00:00",
      "generator": {
        "date": "2024-11-22T11:34:26+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2017:2840",
      "initial_release_date": "2017-10-02T15:20:16+00:00",
      "revision_history": [
        {
          "date": "2017-10-02T15:20:16+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-10-02T15:20:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T11:34:26+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 5 ELS)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 5 ELS)",
                  "product_id": "5Server-ELS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_els:5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64",
                  "product_id": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.45-2.el5_11.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.45-2.el5_11.1.x86_64",
                "product": {
                  "name": "dnsmasq-0:2.45-2.el5_11.1.x86_64",
                  "product_id": "dnsmasq-0:2.45-2.el5_11.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.45-2.el5_11.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x",
                  "product_id": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.45-2.el5_11.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.45-2.el5_11.1.s390x",
                "product": {
                  "name": "dnsmasq-0:2.45-2.el5_11.1.s390x",
                  "product_id": "dnsmasq-0:2.45-2.el5_11.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.45-2.el5_11.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386",
                "product": {
                  "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386",
                  "product_id": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq-debuginfo@2.45-2.el5_11.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.45-2.el5_11.1.i386",
                "product": {
                  "name": "dnsmasq-0:2.45-2.el5_11.1.i386",
                  "product_id": "dnsmasq-0:2.45-2.el5_11.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.45-2.el5_11.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsmasq-0:2.45-2.el5_11.1.src",
                "product": {
                  "name": "dnsmasq-0:2.45-2.el5_11.1.src",
                  "product_id": "dnsmasq-0:2.45-2.el5_11.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dnsmasq@2.45-2.el5_11.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.45-2.el5_11.1.i386 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)",
          "product_id": "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.i386"
        },
        "product_reference": "dnsmasq-0:2.45-2.el5_11.1.i386",
        "relates_to_product_reference": "5Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.45-2.el5_11.1.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)",
          "product_id": "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.s390x"
        },
        "product_reference": "dnsmasq-0:2.45-2.el5_11.1.s390x",
        "relates_to_product_reference": "5Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.45-2.el5_11.1.src as a component of Red Hat Enterprise Linux Server (v. 5 ELS)",
          "product_id": "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.src"
        },
        "product_reference": "dnsmasq-0:2.45-2.el5_11.1.src",
        "relates_to_product_reference": "5Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-0:2.45-2.el5_11.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)",
          "product_id": "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.x86_64"
        },
        "product_reference": "dnsmasq-0:2.45-2.el5_11.1.x86_64",
        "relates_to_product_reference": "5Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)",
          "product_id": "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386",
        "relates_to_product_reference": "5Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)",
          "product_id": "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x",
        "relates_to_product_reference": "5Server-ELS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)",
          "product_id": "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64"
        },
        "product_reference": "dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64",
        "relates_to_product_reference": "5Server-ELS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Felix Wilhelm",
            "Fermin J. Serna",
            "Gabriel Campana",
            "Kevin Hamacher",
            "Ron Bowes"
          ],
          "organization": "Google Security Team"
        }
      ],
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2017-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1495409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dnsmasq: heap overflow in the code responsible for building DNS replies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform includes the dnsmasq-utils RPM which does not contain this flaw\u0027s affected code-paths; Red Hat OpenStack Platform is therefore listed as not affected.\n\nHowever, because all versions of Red Hat OpenStack Platform are based on Red Hat Enterprise Linux, all Red Hat OpenStack Platform users should absolutely upgrade the dnsmasq RPM from Red Hat Enterprise Linux as a matter of urgency using standard update mechanisms (such as \u0027yum update\u0027 or \u0027openstack overcloud update\u0027).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.i386",
          "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.s390x",
          "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.src",
          "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.x86_64",
          "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386",
          "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x",
          "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "RHBZ#1495409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1495409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-14491",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/vulnerabilities/3199382",
          "url": "https://access.redhat.com/security/vulnerabilities/3199382"
        },
        {
          "category": "external",
          "summary": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
          "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
        }
      ],
      "release_date": "2017-10-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-10-02T15:20:16+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.i386",
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.s390x",
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.src",
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.x86_64",
            "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386",
            "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x",
            "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:2840"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.i386",
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.s390x",
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.src",
            "5Server-ELS:dnsmasq-0:2.45-2.el5_11.1.x86_64",
            "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.i386",
            "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.s390x",
            "5Server-ELS:dnsmasq-debuginfo-0:2.45-2.el5_11.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "dnsmasq: heap overflow in the code responsible for building DNS replies"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201710-1433",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "eos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arista",
        "version": "4.16"
      },
      {
        "model": "diskstation manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "5.2"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "7.1"
      },
      {
        "model": "arubaos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.5.1.9"
      },
      {
        "model": "arubaos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.4.4.16"
      },
      {
        "model": "eos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arista",
        "version": "4.17"
      },
      {
        "model": "geforce experience",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nvidia",
        "version": "3.0"
      },
      {
        "model": "eos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arista",
        "version": "4.17.8m"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "14.04"
      },
      {
        "model": "enterprise linux server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "8.0"
      },
      {
        "model": "ruggedcom rm1224",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.0"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "42.2"
      },
      {
        "model": "scalance w1750d",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "6.5.1.5"
      },
      {
        "model": "enterprise linux workstation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.0"
      },
      {
        "model": "honor v9 play",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "huawei",
        "version": "jimmy-al00ac00b135"
      },
      {
        "model": "linux enterprise point of sale",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "suse",
        "version": "11"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "12.04"
      },
      {
        "model": "enterprise linux desktop",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.0"
      },
      {
        "model": "scalance m-800",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.0"
      },
      {
        "model": "dnsmasq",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "thekelleys",
        "version": "2.77"
      },
      {
        "model": "arubaos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.5.3.0"
      },
      {
        "model": "diskstation manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "6.0"
      },
      {
        "model": "linux enterprise server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "suse",
        "version": "12"
      },
      {
        "model": "eos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arista",
        "version": "4.18"
      },
      {
        "model": "arubaos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.5.4.2"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "7.0"
      },
      {
        "model": "arubaos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "8.1.0.0"
      },
      {
        "model": "arubaos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.5.0.0"
      },
      {
        "model": "linux for tegra",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nvidia",
        "version": "r21.6"
      },
      {
        "model": "geforce experience",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nvidia",
        "version": "3.10.0.55"
      },
      {
        "model": "arubaos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.5.4.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "scalance s615",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "5.0"
      },
      {
        "model": "linux enterprise debuginfo",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "suse",
        "version": "11"
      },
      {
        "model": "linux enterprise server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "suse",
        "version": "11"
      },
      {
        "model": "linux for tegra",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nvidia",
        "version": "r24.2.2"
      },
      {
        "model": "arubaos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.3.1.25"
      },
      {
        "model": "enterprise linux server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.0"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "16.04"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "42.3"
      },
      {
        "model": "router manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "1.1"
      },
      {
        "model": "arubaos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.4.4.0"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "17.04"
      },
      {
        "model": "eos",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "arista",
        "version": "4.15"
      },
      {
        "model": "enterprise linux workstation",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "6.0"
      },
      {
        "model": "arubaos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "8.1.0.4"
      },
      {
        "model": "eos",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "arista",
        "version": "4.18.4.2f"
      },
      {
        "model": "arubaos",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.3.1"
      },
      {
        "model": "diskstation manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "6.1"
      },
      {
        "model": "eos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arista",
        "version": "4.16.13m"
      },
      {
        "model": "arubaos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "arubanetworks",
        "version": "6.5.3.3"
      },
      {
        "model": "enterprise linux desktop",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.0"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ruckus",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "technicolor",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "zyxel",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "dnsmasq",
        "version": null
      },
      {
        "model": "ubuntu",
        "scope": null,
        "trust": 0.8,
        "vendor": "canonical",
        "version": null
      },
      {
        "model": "red hat enterprise linux server",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ec\u30c3\u30c9\u30cf\u30c3\u30c8",
        "version": null
      },
      {
        "model": "red hat enterprise linux workstation",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ec\u30c3\u30c9\u30cf\u30c3\u30c8",
        "version": null
      },
      {
        "model": "red hat enterprise linux desktop",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30ec\u30c3\u30c9\u30cf\u30c3\u30c8",
        "version": null
      },
      {
        "model": "leap",
        "scope": null,
        "trust": 0.8,
        "vendor": "opensuse",
        "version": null
      },
      {
        "model": "gnu/linux",
        "scope": null,
        "trust": 0.8,
        "vendor": "debian",
        "version": null
      },
      {
        "model": "dnsmasq",
        "scope": null,
        "trust": 0.8,
        "vendor": "thekelleys",
        "version": null
      },
      {
        "model": "scalance w1750d",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "scalance s615",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      },
      {
        "model": "scalance m800",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "0"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#973527"
      },
      {
        "db": "BID",
        "id": "101977"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.77",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "r21.6",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:nvidia:jetson_tk1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "r24.2.2",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.10.0.55",
                    "versionStartIncluding": "3.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:huawei:honor_v9_play_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "jimmy-al00ac00b135",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:huawei:honor_v9_play:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.18.4.2f",
                "versionStartIncluding": "4.18",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.17.8m",
                "versionStartIncluding": "4.17",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.15",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.16.13m",
                "versionStartIncluding": "4.16",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "5.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "5.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "5.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "6.5.1.5",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.1.0.4",
                "versionStartIncluding": "8.1.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.5.4.2",
                "versionStartIncluding": "6.5.4.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.5.3.3",
                "versionStartIncluding": "6.5.3.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.5.1.9",
                "versionStartIncluding": "6.5.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.4.4.16",
                "versionStartIncluding": "6.4.4.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.3.1.25",
                "versionStartIncluding": "6.3.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "144474"
      },
      {
        "db": "PACKETSTORM",
        "id": "144481"
      },
      {
        "db": "PACKETSTORM",
        "id": "144482"
      },
      {
        "db": "PACKETSTORM",
        "id": "144472"
      }
    ],
    "trust": 0.4
  },
  "cve": "CVE-2017-14491",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Partial",
            "baseScore": 7.5,
            "confidentialityImpact": "Partial",
            "exploitabilityScore": null,
            "id": "CVE-2017-14491",
            "impactScore": null,
            "integrityImpact": "Partial",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.9,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2017-14491",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2017-14491",
            "trust": 1.8,
            "value": "CRITICAL"
          },
          {
            "author": "VULMON",
            "id": "CVE-2017-14491",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. Dnsmasq versions 2.77 and earlier contains multiple vulnerabilities. dnsmasq Exists in a buffer error vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Multiple Siemens SCALANCE Products are prone to the following security vulnerabilities:\n1. A buffer-overflow vulnerability\n2. \nThis BID is being retired as a duplicate of BID 101085 Dnsmasq VU#973527 Multiple Security Vulnerabilities. \n===========================================================================\nUbuntu Security Notice USN-3430-3\nJanuary 04, 2018\n\ndnsmasq regression\n===========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 12.04 ESM\n\nSummary:\n\nUSN-3430-2 introduced regression in Dnsmasq. \n\nSoftware Description:\n- dnsmasq: Small caching DNS proxy and DHCP/TFTP server\n\nDetails:\n\nUSN-3430-2 fixed several vulnerabilities. The update introduced a new\nregression that breaks DNS resolution. This update addresses the\nproblem. \n\nWe apologize for the inconvenience. \n\nOriginal advisory details:\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DNS requests. \n(CVE-2017-14491)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled IPv6 router\nadvertisements. (CVE-2017-14492)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DHCPv6 requests. \n(CVE-2017-14493)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DHCPv6 packets. A remote\nattacker could use this issue to possibly obtain sensitive memory\ncontents. (CVE-2017-14494)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DNS requests. A remote\nattacker could use this issue to cause Dnsmasq to consume memory,\nresulting in a denial of service. (CVE-2017-14495)\n\nFelix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher\ndiscovered that Dnsmasq incorrectly handled DNS requests. (CVE-2017-14496)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 12.04 ESM:\n dnsmasq=C2=A02.59-4ubuntu0.4\n dnsmasq-base2.59-4ubuntu0.4\n dnsmasq-utils2.59-4ubuntu0.4\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. 6) - i386, x86_64\n\n3. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Critical: dnsmasq security update\nAdvisory ID:       RHSA-2017:2839-01\nProduct:           Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2017:2839\nIssue date:        2017-10-02\nCVE Names:         CVE-2017-14491 \n=====================================================================\n\n1. Summary:\n\nAn update for dnsmasq is now available for Red Hat Enterprise Linux 6.2\nAdvanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update\nSupport, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat\nEnterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise\nLinux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco\nExtended Update Support, and Red Hat Enterprise Linux 6.7 Extended Update\nSupport. \n\nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux HPC Node EUS (v. 6.7) - x86_64\nRed Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) - x86_64\nRed Hat Enterprise Linux Server AUS (v. 6.2) - x86_64\nRed Hat Enterprise Linux Server AUS (v. 6.4) - x86_64\nRed Hat Enterprise Linux Server AUS (v. 6.5) - x86_64\nRed Hat Enterprise Linux Server AUS (v. 6.6) - x86_64\nRed Hat Enterprise Linux Server EUS (v. 6.7) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server Optional AUS (v. 6.4) - x86_64\nRed Hat Enterprise Linux Server Optional AUS (v. 6.5) - x86_64\nRed Hat Enterprise Linux Server Optional AUS (v. 6.6) - x86_64\nRed Hat Enterprise Linux Server Optional EUS (v. 6.7) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server Optional TUS (v. 6.5) - x86_64\nRed Hat Enterprise Linux Server Optional TUS (v. 6.6) - x86_64\nRed Hat Enterprise Linux Server TUS (v. 6.5) - x86_64\nRed Hat Enterprise Linux Server TUS (v. 6.6) - x86_64\n\n3. Description:\n\nThe dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name\nServer) forwarder and DHCP (Dynamic Host Configuration Protocol) server. \n\nSecurity Fix(es):\n\n* A heap buffer overflow was found in dnsmasq in the code responsible for\nbuilding DNS replies. \n(CVE-2017-14491)\n\nRed Hat would like to thank Felix Wilhelm (Google Security Team), Fermin J. \nSerna (Google Security Team), Gabriel Campana (Google Security Team), Kevin\nHamacher (Google Security Team), and Ron Bowes (Google Security Team) for\nreporting this issue. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1495409 - CVE-2017-14491 dnsmasq: heap overflow in the code responsible for building DNS replies\n\n6. Package List:\n\nRed Hat Enterprise Linux HPC Node EUS (v. 6.7):\n\nSource:\ndnsmasq-2.48-16.el6_7.1.src.rpm\n\nx86_64:\ndnsmasq-2.48-16.el6_7.1.x86_64.rpm\ndnsmasq-debuginfo-2.48-16.el6_7.1.x86_64.rpm\n\nRed Hat Enterprise Linux HPC Node Optional EUS (v. 6.7):\n\nx86_64:\ndnsmasq-debuginfo-2.48-16.el6_7.1.x86_64.rpm\ndnsmasq-utils-2.48-16.el6_7.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server AUS (v. 6.2):\n\nSource:\ndnsmasq-2.48-5.el6_2.2.src.rpm\n\nx86_64:\ndnsmasq-2.48-5.el6_2.2.x86_64.rpm\ndnsmasq-debuginfo-2.48-5.el6_2.2.x86_64.rpm\n\nRed Hat Enterprise Linux Server AUS (v. 6.4):\n\nSource:\ndnsmasq-2.48-13.el6_4.1.src.rpm\n\nx86_64:\ndnsmasq-2.48-13.el6_4.1.x86_64.rpm\ndnsmasq-debuginfo-2.48-13.el6_4.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server AUS (v. 6.5):\n\nSource:\ndnsmasq-2.48-13.el6_5.1.src.rpm\n\nx86_64:\ndnsmasq-2.48-13.el6_5.1.x86_64.rpm\ndnsmasq-debuginfo-2.48-13.el6_5.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server TUS (v. 6.5):\n\nSource:\ndnsmasq-2.48-13.el6_5.1.src.rpm\n\nx86_64:\ndnsmasq-2.48-13.el6_5.1.x86_64.rpm\ndnsmasq-debuginfo-2.48-13.el6_5.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server AUS (v. 6.6):\n\nSource:\ndnsmasq-2.48-14.el6_6.1.src.rpm\n\nx86_64:\ndnsmasq-2.48-14.el6_6.1.x86_64.rpm\ndnsmasq-debuginfo-2.48-14.el6_6.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server TUS (v. 6.6):\n\nSource:\ndnsmasq-2.48-14.el6_6.1.src.rpm\n\nx86_64:\ndnsmasq-2.48-14.el6_6.1.x86_64.rpm\ndnsmasq-debuginfo-2.48-14.el6_6.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server EUS (v. 6.7):\n\nSource:\ndnsmasq-2.48-16.el6_7.1.src.rpm\n\ni386:\ndnsmasq-2.48-16.el6_7.1.i686.rpm\ndnsmasq-debuginfo-2.48-16.el6_7.1.i686.rpm\n\nppc64:\ndnsmasq-2.48-16.el6_7.1.ppc64.rpm\ndnsmasq-debuginfo-2.48-16.el6_7.1.ppc64.rpm\n\ns390x:\ndnsmasq-2.48-16.el6_7.1.s390x.rpm\ndnsmasq-debuginfo-2.48-16.el6_7.1.s390x.rpm\n\nx86_64:\ndnsmasq-2.48-16.el6_7.1.x86_64.rpm\ndnsmasq-debuginfo-2.48-16.el6_7.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional AUS (v. 6.4):\n\nSource:\ndnsmasq-2.48-13.el6_4.1.src.rpm\n\nx86_64:\ndnsmasq-debuginfo-2.48-13.el6_4.1.x86_64.rpm\ndnsmasq-utils-2.48-13.el6_4.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional AUS (v. 6.5):\n\nSource:\ndnsmasq-2.48-13.el6_5.1.src.rpm\n\nx86_64:\ndnsmasq-debuginfo-2.48-13.el6_5.1.x86_64.rpm\ndnsmasq-utils-2.48-13.el6_5.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional TUS (v. 6.5):\n\nSource:\ndnsmasq-2.48-13.el6_5.1.src.rpm\n\nx86_64:\ndnsmasq-debuginfo-2.48-13.el6_5.1.x86_64.rpm\ndnsmasq-utils-2.48-13.el6_5.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional AUS (v. 6.6):\n\nx86_64:\ndnsmasq-debuginfo-2.48-14.el6_6.1.x86_64.rpm\ndnsmasq-utils-2.48-14.el6_6.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional TUS (v. 6.6):\n\nx86_64:\ndnsmasq-debuginfo-2.48-14.el6_6.1.x86_64.rpm\ndnsmasq-utils-2.48-14.el6_6.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional EUS (v. 6.7):\n\ni386:\ndnsmasq-debuginfo-2.48-16.el6_7.1.i686.rpm\ndnsmasq-utils-2.48-16.el6_7.1.i686.rpm\n\nppc64:\ndnsmasq-debuginfo-2.48-16.el6_7.1.ppc64.rpm\ndnsmasq-utils-2.48-16.el6_7.1.ppc64.rpm\n\ns390x:\ndnsmasq-debuginfo-2.48-16.el6_7.1.s390x.rpm\ndnsmasq-utils-2.48-16.el6_7.1.s390x.rpm\n\nx86_64:\ndnsmasq-debuginfo-2.48-16.el6_7.1.x86_64.rpm\ndnsmasq-utils-2.48-16.el6_7.1.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2017-14491\nhttps://access.redhat.com/security/updates/classification/#critical\nhttps://access.redhat.com/security/vulnerabilities/3199382\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2017 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niD8DBQFZ0nLUXlSAg2UNWIIRAn39AKDCsn16dEmmA7DazjU2IOpWLIFp8QCeODoG\n7t7GGwkabW2pC2Wcr35n/G8=\n=S/6b\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      },
      {
        "db": "CERT/CC",
        "id": "VU#973527"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "db": "BID",
        "id": "101977"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "db": "PACKETSTORM",
        "id": "144490"
      },
      {
        "db": "PACKETSTORM",
        "id": "145652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144474"
      },
      {
        "db": "PACKETSTORM",
        "id": "144481"
      },
      {
        "db": "PACKETSTORM",
        "id": "144482"
      },
      {
        "db": "PACKETSTORM",
        "id": "144472"
      }
    ],
    "trust": 3.24
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=42941",
        "trust": 0.1,
        "type": "exploit"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2017-14491",
        "trust": 3.6
      },
      {
        "db": "CERT/CC",
        "id": "VU#973527",
        "trust": 2.7
      },
      {
        "db": "BID",
        "id": "101977",
        "trust": 1.4
      },
      {
        "db": "BID",
        "id": "101085",
        "trust": 1.1
      },
      {
        "db": "SECTRACK",
        "id": "1039474",
        "trust": 1.1
      },
      {
        "db": "SIEMENS",
        "id": "SSA-689071",
        "trust": 1.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144480",
        "trust": 1.1
      },
      {
        "db": "EXPLOIT-DB",
        "id": "42941",
        "trust": 1.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-332-01",
        "trust": 1.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-24-074-07",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU93453933",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU93656033",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618",
        "trust": 0.8
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-14491",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144490",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "145652",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144474",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144481",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144482",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "144472",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#973527"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "db": "BID",
        "id": "101977"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "db": "PACKETSTORM",
        "id": "144490"
      },
      {
        "db": "PACKETSTORM",
        "id": "145652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144474"
      },
      {
        "db": "PACKETSTORM",
        "id": "144481"
      },
      {
        "db": "PACKETSTORM",
        "id": "144482"
      },
      {
        "db": "PACKETSTORM",
        "id": "144472"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "id": "VAR-201710-1433",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.466444625
  },
  "last_update_date": "2024-07-23T19:53:25.247000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Multiple\u00a0Critical\u00a0and\u00a0Important\u00a0vulnerabilities",
        "trust": 0.8,
        "url": "https://usn.ubuntu.com/usn/usn-3430-1/"
      },
      {
        "title": "Red Hat: Critical: dnsmasq security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20172838 - security advisory"
      },
      {
        "title": "Red Hat: Critical: dnsmasq security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20172841 - security advisory"
      },
      {
        "title": "Red Hat: Critical: dnsmasq security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20172840 - security advisory"
      },
      {
        "title": "Red Hat: Critical: dnsmasq security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20172839 - security advisory"
      },
      {
        "title": "Red Hat: Critical: dnsmasq security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20172837 - security advisory"
      },
      {
        "title": "Red Hat: Critical: dnsmasq security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20172836 - security advisory"
      },
      {
        "title": "Debian CVElist Bug Report Logs: dnsmasq: CVE-2017-13704: Size parameter overflow via large DNS query",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=fa8aad66cae5df51d49e1cdce2fe4a42"
      },
      {
        "title": "Arch Linux Issues: ",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=cve-2017-14491"
      },
      {
        "title": "Ubuntu Security Notice: dnsmasq vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3430-2"
      },
      {
        "title": "Ubuntu Security Notice: dnsmasq regression",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3430-3"
      },
      {
        "title": "Ubuntu Security Notice: dnsmasq vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3430-1"
      },
      {
        "title": "Debian Security Advisories: DSA-3989-1 dnsmasq -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=5c18698ecfe74c7de381531f8ed44dcf"
      },
      {
        "title": "Siemens Security Advisories: Siemens Security Advisory",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories\u0026qid=7f490a104360d6f65bee18ec7bfa18a3"
      },
      {
        "title": "Amazon Linux 2: ALAS2-2019-1251",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=alas2-2019-1251"
      },
      {
        "title": "Arch Linux Advisories: [ASA-201710-1] dnsmasq: multiple issues",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201710-1"
      },
      {
        "title": "Amazon Linux AMI: ALAS-2017-907",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2017-907"
      },
      {
        "title": "Oracle VM Server for x86 Bulletins: Oracle VM Server for x86 Bulletin - October 2017",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_vm_server_for_x86_bulletins\u0026qid=b1921e7bf61366a1d7f889a7cdefa932"
      },
      {
        "title": "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - October 2017",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins\u0026qid=6283337cd31f81f24d445925f2138c0e"
      },
      {
        "title": "Oracle Linux Bulletins: Oracle Linux Bulletin - October 2017",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins\u0026qid=7251d5e5f2b1771951980ad7cfde50ba"
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/suhaad79/aws-k8s-kops-ansible "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/calvinkkd/aws-k8s-kkd-ansible "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/simonelle/aws-k8s-kops-ansible "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/scholzj/aws-k8s-kops-ansible "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/bisiman2/aws-k8s-kops-ansible "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/honey336/-aws-k8s-kops-ansible "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible -1\naws-k8s-kops-ansible\naws-k8s-kops-ansible\naws-k8s-kops-ansible\naws-k8s-kops-ansible",
        "trust": 0.1,
        "url": "https://github.com/andreadote/aws-k8s-kops-ansible "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/ravitejaadepudi/kopscluster "
      },
      {
        "title": "Kubernetes setup on Amazon AWS using Kops and Ansible",
        "trust": 0.1,
        "url": "https://github.com/lorerunner/devops_kubenerates_aws "
      },
      {
        "title": "Kaosagnt\u0027s Ansible Everyday Utils",
        "trust": 0.1,
        "url": "https://github.com/kaosagnt/ansible-everyday "
      },
      {
        "title": "Awesome CVE PoC",
        "trust": 0.1,
        "url": "https://github.com/xbl3/awesome-cve-poc_qazbnm456 "
      },
      {
        "title": "Awesome CVE PoC",
        "trust": 0.1,
        "url": "https://github.com/lnick2023/nicenice "
      },
      {
        "title": "Awesome CVE PoC",
        "trust": 0.1,
        "url": "https://github.com/qazbnm456/awesome-cve-poc "
      },
      {
        "title": "Threatpost",
        "trust": 0.1,
        "url": "https://threatpost.com/google-warns-of-dos-and-rce-bugs-in-dnsmasq/128238/"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-787",
        "trust": 1.0
      },
      {
        "problemtype": "Buffer error (CWE-119) [NVD evaluation ]",
        "trust": 0.8
      },
      {
        "problemtype": " Heap-based buffer overflow (CWE-122) [IPA evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "http://www.debian.org/security/2017/dsa-3989"
      },
      {
        "trust": 2.0,
        "url": "https://www.kb.cert.org/vuls/id/973527"
      },
      {
        "trust": 1.9,
        "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
      },
      {
        "trust": 1.5,
        "url": "https://access.redhat.com/security/vulnerabilities/3199382"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-14491"
      },
      {
        "trust": 1.3,
        "url": "https://access.redhat.com/errata/rhsa-2017:2838"
      },
      {
        "trust": 1.3,
        "url": "http://www.ubuntu.com/usn/usn-3430-1"
      },
      {
        "trust": 1.2,
        "url": "https://www.exploit-db.com/exploits/42941/"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/errata/rhsa-2017:2841"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/errata/rhsa-2017:2840"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/errata/rhsa-2017:2839"
      },
      {
        "trust": 1.2,
        "url": "http://www.ubuntu.com/usn/usn-3430-2"
      },
      {
        "trust": 1.2,
        "url": "http://www.ubuntu.com/usn/usn-3430-3"
      },
      {
        "trust": 1.1,
        "url": "http://www.securitytracker.com/id/1039474"
      },
      {
        "trust": 1.1,
        "url": "http://thekelleys.org.uk/dnsmasq/changelog"
      },
      {
        "trust": 1.1,
        "url": "http://www.securityfocus.com/bid/101085"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2017:2837"
      },
      {
        "trust": 1.1,
        "url": "https://access.redhat.com/errata/rhsa-2017:2836"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html"
      },
      {
        "trust": 1.1,
        "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
      },
      {
        "trust": 1.1,
        "url": "https://security.gentoo.org/glsa/201710-27"
      },
      {
        "trust": 1.1,
        "url": "http://www.securityfocus.com/bid/101977"
      },
      {
        "trust": 1.1,
        "url": "https://www.synology.com/support/security/synology_sa_17_59_dnsmasq"
      },
      {
        "trust": 1.1,
        "url": "http://www.arubanetworks.com/assets/alert/aruba-psa-2017-005.txt"
      },
      {
        "trust": 1.1,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf"
      },
      {
        "trust": 1.1,
        "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4560"
      },
      {
        "trust": 1.1,
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html"
      },
      {
        "trust": 1.1,
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449"
      },
      {
        "trust": 1.1,
        "url": "http://packetstormsecurity.com/files/144480/dnsmasq-2-byte-heap-based-overflow.html"
      },
      {
        "trust": 1.1,
        "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html"
      },
      {
        "trust": 1.1,
        "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30"
      },
      {
        "trust": 1.1,
        "url": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3ba=commit%3bh=0549c73b7ea6b22a3c49beb4d432f185a81efcbc"
      },
      {
        "trust": 1.1,
        "url": "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11665.html"
      },
      {
        "trust": 1.1,
        "url": "https://www.mail-archive.com/dnsmasq-discuss%40lists.thekelleys.org.uk/msg11664.html"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5mmpcjoyppl4b5rby4u425pwg7eetdtd/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/yxrz2w6tv6nlujc5nofbsg6pzsmdtypv/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/527knn34rn2sb6mbjg7cksebwye3tjeb/"
      },
      {
        "trust": 1.1,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-332-01"
      },
      {
        "trust": 0.8,
        "url": "http://www.thekelleys.org.uk/dnsmasq/doc.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.ruckuswireless.com/security"
      },
      {
        "trust": 0.8,
        "url": "https://www.zyxel.com/support/announcement_dnsmasq_vulnerabilities.shtml"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/vu/jvnvu93453933/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu93656033/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-07"
      },
      {
        "trust": 0.4,
        "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.4,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2017-14491"
      },
      {
        "trust": 0.3,
        "url": "http://subscriber.communications.siemens.com/"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-14496"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-14494"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-14492"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-14493"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-14495"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/787.html"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/suhaad79/aws-k8s-kops-ansible"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/scholzj/aws-k8s-kops-ansible"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/bugs/1741262"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#973527"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "db": "BID",
        "id": "101977"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "db": "PACKETSTORM",
        "id": "144490"
      },
      {
        "db": "PACKETSTORM",
        "id": "145652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144474"
      },
      {
        "db": "PACKETSTORM",
        "id": "144481"
      },
      {
        "db": "PACKETSTORM",
        "id": "144482"
      },
      {
        "db": "PACKETSTORM",
        "id": "144472"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#973527"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "db": "BID",
        "id": "101977"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "db": "PACKETSTORM",
        "id": "144490"
      },
      {
        "db": "PACKETSTORM",
        "id": "145652"
      },
      {
        "db": "PACKETSTORM",
        "id": "144474"
      },
      {
        "db": "PACKETSTORM",
        "id": "144481"
      },
      {
        "db": "PACKETSTORM",
        "id": "144482"
      },
      {
        "db": "PACKETSTORM",
        "id": "144472"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-10-02T00:00:00",
        "db": "CERT/CC",
        "id": "VU#973527"
      },
      {
        "date": "2017-10-04T00:00:00",
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "date": "2017-11-28T00:00:00",
        "db": "BID",
        "id": "101977"
      },
      {
        "date": "2017-10-24T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "date": "2017-10-03T20:21:00",
        "db": "PACKETSTORM",
        "id": "144490"
      },
      {
        "date": "2018-01-04T17:50:40",
        "db": "PACKETSTORM",
        "id": "145652"
      },
      {
        "date": "2017-10-02T08:55:00",
        "db": "PACKETSTORM",
        "id": "144474"
      },
      {
        "date": "2017-10-03T05:18:12",
        "db": "PACKETSTORM",
        "id": "144481"
      },
      {
        "date": "2017-10-03T05:18:27",
        "db": "PACKETSTORM",
        "id": "144482"
      },
      {
        "date": "2017-10-02T08:33:00",
        "db": "PACKETSTORM",
        "id": "144472"
      },
      {
        "date": "2017-10-04T01:29:02.870000",
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-02-02T00:00:00",
        "db": "CERT/CC",
        "id": "VU#973527"
      },
      {
        "date": "2023-11-07T00:00:00",
        "db": "VULMON",
        "id": "CVE-2017-14491"
      },
      {
        "date": "2019-05-15T17:00:00",
        "db": "BID",
        "id": "101977"
      },
      {
        "date": "2024-03-22T07:54:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-008618"
      },
      {
        "date": "2023-11-07T02:39:01.190000",
        "db": "NVD",
        "id": "CVE-2017-14491"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "network",
    "sources": [
      {
        "db": "BID",
        "id": "101977"
      }
    ],
    "trust": 0.3
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Dnsmasq contains multiple vulnerabilities",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#973527"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "overflow, arbitrary",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "144474"
      },
      {
        "db": "PACKETSTORM",
        "id": "144481"
      },
      {
        "db": "PACKETSTORM",
        "id": "144482"
      },
      {
        "db": "PACKETSTORM",
        "id": "144472"
      }
    ],
    "trust": 0.4
  }
}

{
  "GSD": {
    "alias": "CVE-2017-14491",
    "description": "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.",
    "id": "GSD-2017-14491",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-14491.html",
      "https://www.debian.org/security/2017/dsa-3989",
      "https://access.redhat.com/errata/RHSA-2017:2841",
      "https://access.redhat.com/errata/RHSA-2017:2840",
      "https://access.redhat.com/errata/RHSA-2017:2839",
      "https://access.redhat.com/errata/RHSA-2017:2838",
      "https://access.redhat.com/errata/RHSA-2017:2837",
      "https://access.redhat.com/errata/RHSA-2017:2836",
      "https://ubuntu.com/security/CVE-2017-14491",
      "https://advisories.mageia.org/CVE-2017-14491.html",
      "https://security.archlinux.org/CVE-2017-14491",
      "https://alas.aws.amazon.com/cve/html/CVE-2017-14491.html",
      "https://linux.oracle.com/cve/CVE-2017-14491.html",
      "https://packetstormsecurity.com/files/cve/CVE-2017-14491"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-14491"
      ],
      "details": "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.",
      "id": "GSD-2017-14491",
      "modified": "2023-12-13T01:21:12.964743Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2017-14491",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "1039474",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1039474"
          },
          {
            "name": "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
            "refsource": "CONFIRM",
            "url": "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq"
          },
          {
            "name": "DSA-3989",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2017/dsa-3989"
          },
          {
            "name": "https://access.redhat.com/security/vulnerabilities/3199382",
            "refsource": "CONFIRM",
            "url": "https://access.redhat.com/security/vulnerabilities/3199382"
          },
          {
            "name": "101085",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/101085"
          },
          {
            "name": "USN-3430-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-3430-1"
          },
          {
            "name": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=0549c73b7ea6b22a3c49beb4d432f185a81efcbc",
            "refsource": "CONFIRM",
            "url": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=0549c73b7ea6b22a3c49beb4d432f185a81efcbc"
          },
          {
            "name": "101977",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/101977"
          },
          {
            "name": "RHSA-2017:2838",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2838"
          },
          {
            "name": "VU#973527",
            "refsource": "CERT-VN",
            "url": "https://www.kb.cert.org/vuls/id/973527"
          },
          {
            "name": "GLSA-201710-27",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201710-27"
          },
          {
            "name": "RHSA-2017:2840",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2840"
          },
          {
            "name": "USN-3430-2",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-3430-2"
          },
          {
            "name": "RHSA-2017:2839",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2839"
          },
          {
            "name": "[dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.",
            "refsource": "MLIST",
            "url": "https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11665.html"
          },
          {
            "name": "RHSA-2017:2836",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2836"
          },
          {
            "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
            "refsource": "CONFIRM",
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
          },
          {
            "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
            "refsource": "CONFIRM",
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt"
          },
          {
            "name": "RHSA-2017:2837",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2837"
          },
          {
            "name": "42941",
            "refsource": "EXPLOIT-DB",
            "url": "https://www.exploit-db.com/exploits/42941/"
          },
          {
            "name": "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
            "refsource": "CONFIRM",
            "url": "http://thekelleys.org.uk/dnsmasq/CHANGELOG"
          },
          {
            "name": "RHSA-2017:2841",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:2841"
          },
          {
            "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4560",
            "refsource": "CONFIRM",
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4560"
          },
          {
            "name": "openSUSE-SU-2017:2633",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html"
          },
          {
            "name": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
            "refsource": "MISC",
            "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
          },
          {
            "name": "[dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.",
            "refsource": "MLIST",
            "url": "https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11664.html"
          },
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
            "refsource": "CONFIRM",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf"
          },
          {
            "name": "FEDORA-2017-515264ae24",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD/"
          },
          {
            "name": "FEDORA-2017-24f067299e",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV/"
          },
          {
            "name": "USN-3430-3",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-3430-3"
          },
          {
            "name": "http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html"
          },
          {
            "name": "SUSE-SU-2017:2619",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html"
          },
          {
            "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/",
            "refsource": "CONFIRM",
            "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/"
          },
          {
            "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en",
            "refsource": "CONFIRM",
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en"
          },
          {
            "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449",
            "refsource": "CONFIRM",
            "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449"
          },
          {
            "name": "FEDORA-2017-7106a157f5",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB/"
          },
          {
            "name": "SUSE-SU-2017:2616",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html"
          },
          {
            "name": "SUSE-SU-2017:2617",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html"
          },
          {
            "name": "DSA-3989",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2017/dsa-3989"
          },
          {
            "name": "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30",
            "refsource": "MISC",
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.77",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:ltss:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "r21.6",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:nvidia:jetson_tk1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "r24.2.2",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.10.0.55",
                    "versionStartIncluding": "3.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:huawei:honor_v9_play_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "jimmy-al00ac00b135",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:huawei:honor_v9_play:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.15",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.16.13m",
                "versionStartIncluding": "4.16",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.17.8m",
                "versionStartIncluding": "4.17",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.18.4.2f",
                "versionStartIncluding": "4.18",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "5.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "5.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "5.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "6.5.1.5",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.3.1.25",
                "versionStartIncluding": "6.3.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.4.4.16",
                "versionStartIncluding": "6.4.4.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.5.1.9",
                "versionStartIncluding": "6.5.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.5.3.3",
                "versionStartIncluding": "6.5.3.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "6.5.4.2",
                "versionStartIncluding": "6.5.4.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.1.0.4",
                "versionStartIncluding": "8.1.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-14491"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[dnsmasq-discuss] 20171002 Announce: dnsmasq-2.78.",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11665.html"
            },
            {
              "name": "[dnsmasq-discuss] 20171002 IMPORTANT SECURITY INFORMATION.",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11664.html"
            },
            {
              "name": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
            },
            {
              "name": "1039474",
              "refsource": "SECTRACK",
              "tags": [
                "Broken Link"
              ],
              "url": "http://www.securitytracker.com/id/1039474"
            },
            {
              "name": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=0549c73b7ea6b22a3c49beb4d432f185a81efcbc",
              "refsource": "CONFIRM",
              "tags": [
                "Mailing List",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=0549c73b7ea6b22a3c49beb4d432f185a81efcbc"
            },
            {
              "name": "http://thekelleys.org.uk/dnsmasq/CHANGELOG",
              "refsource": "CONFIRM",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "http://thekelleys.org.uk/dnsmasq/CHANGELOG"
            },
            {
              "name": "42941",
              "refsource": "EXPLOIT-DB",
              "tags": [
                "Exploit",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "https://www.exploit-db.com/exploits/42941/"
            },
            {
              "name": "101085",
              "refsource": "BID",
              "tags": [
                "Broken Link"
              ],
              "url": "http://www.securityfocus.com/bid/101085"
            },
            {
              "name": "VU#973527",
              "refsource": "CERT-VN",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "https://www.kb.cert.org/vuls/id/973527"
            },
            {
              "name": "https://access.redhat.com/security/vulnerabilities/3199382",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/security/vulnerabilities/3199382"
            },
            {
              "name": "RHSA-2017:2841",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2841"
            },
            {
              "name": "RHSA-2017:2840",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2840"
            },
            {
              "name": "RHSA-2017:2839",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2839"
            },
            {
              "name": "RHSA-2017:2838",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2838"
            },
            {
              "name": "RHSA-2017:2837",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2837"
            },
            {
              "name": "RHSA-2017:2836",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2017:2836"
            },
            {
              "name": "USN-3430-2",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-3430-2"
            },
            {
              "name": "USN-3430-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-3430-1"
            },
            {
              "name": "DSA-3989",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2017/dsa-3989"
            },
            {
              "name": "openSUSE-SU-2017:2633",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
            },
            {
              "name": "GLSA-201710-27",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.gentoo.org/glsa/201710-27"
            },
            {
              "name": "101977",
              "refsource": "BID",
              "tags": [
                "Broken Link"
              ],
              "url": "http://www.securityfocus.com/bid/101977"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4560",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4560"
            },
            {
              "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449/"
            },
            {
              "name": "USN-3430-3",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-3430-3"
            },
            {
              "name": "FEDORA-2017-24f067299e",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV/"
            },
            {
              "name": "SUSE-SU-2017:2619",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html"
            },
            {
              "name": "DSA-3989",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2017/dsa-3989"
            },
            {
              "name": "SUSE-SU-2017:2617",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html"
            },
            {
              "name": "FEDORA-2017-515264ae24",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD/"
            },
            {
              "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449"
            },
            {
              "name": "http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en"
            },
            {
              "name": "FEDORA-2017-7106a157f5",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB/"
            },
            {
              "name": "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30",
              "refsource": "MISC",
              "tags": [
                "Mitigation",
                "Third Party Advisory"
              ],
              "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30"
            },
            {
              "name": "SUSE-SU-2017:2616",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-04-22T20:39Z",
      "publishedDate": "2017-10-04T01:29Z"
    }
  }
}

{
  "affected": [],
  "aliases": [
    "CVE-2017-14491"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-10-04T01:29:00Z",
    "severity": "CRITICAL"
  },
  "details": "Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.",
  "id": "GHSA-m4px-ph3f-7964",
  "modified": "2022-04-30T00:02:19Z",
  "published": "2022-04-30T00:02:19Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14491"
    },
    {
      "type": "WEB",
      "url": "https://www.synology.com/support/security/Synology_SA_17_59_Dnsmasq"
    },
    {
      "type": "WEB",
      "url": "https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11665.html"
    },
    {
      "type": "WEB",
      "url": "https://www.mail-archive.com/dnsmasq-discuss@lists.thekelleys.org.uk/msg11664.html"
    },
    {
      "type": "WEB",
      "url": "https://www.kb.cert.org/vuls/id/973527"
    },
    {
      "type": "WEB",
      "url": "https://www.exploit-db.com/exploits/42941"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2017/dsa-3989"
    },
    {
      "type": "WEB",
      "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-449"
    },
    {
      "type": "WEB",
      "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/3577-security-advisory-30"
    },
    {
      "type": "WEB",
      "url": "https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201710-27"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YXRZ2W6TV6NLUJC5NOFBSG6PZSMDTYPV"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MMPCJOYPPL4B5RBY4U425PWG7EETDTD"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/527KNN34RN2SB6MBJG7CKSEBWYE3TJEB"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-689071.pdf"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/vulnerabilities/3199382"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2841"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2840"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2839"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2838"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2837"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:2836"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00003.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00004.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00005.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00006.html"
    },
    {
      "type": "WEB",
      "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4560"
    },
    {
      "type": "WEB",
      "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/144480/Dnsmasq-2-Byte-Heap-Based-Overflow.html"
    },
    {
      "type": "WEB",
      "url": "http://thekelleys.org.uk/dnsmasq/CHANGELOG"
    },
    {
      "type": "WEB",
      "url": "http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=0549c73b7ea6b22a3c49beb4d432f185a81efcbc"
    },
    {
      "type": "WEB",
      "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-005.txt"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2017/dsa-3989"
    },
    {
      "type": "WEB",
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171103-01-dnsmasq-en"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/101085"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/101977"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1039474"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-3430-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-3430-2"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-3430-3"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "SIMATIC RF160B contain multiple vulnerabilities of different types that could allow an attacker to execute arbitrary code within the context of a privileged process.\n\nSiemens has released a new version for SIMATIC RF160B and recommends to update to the latest version.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
      },
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-770721.json"
      },
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-770721.pdf"
      },
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-770721.txt"
      }
    ],
    "title": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2",
    "tracking": {
      "current_release_date": "2024-03-12T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-770721",
      "initial_release_date": "2024-03-12T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-03-12T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "interim",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.2",
                "product": {
                  "name": "SIMATIC RF160B (6GT2003-0FA00)",
                  "product_id": "1",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GT2003-0FA00"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF160B (6GT2003-0FA00)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash or potentially execute arbitrary code by sending specially crafted DNS responses to the DNSmasq process. In order to exploit this vulnerability, an attacker must be able to trigger DNS requests from the device, and must be in a privileged position to inject malicious DNS responses.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2017-14491"
    },
    {
      "cve": "CVE-2017-18509",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2017-18509"
    },
    {
      "cve": "CVE-2020-0338",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-0338"
    },
    {
      "cve": "CVE-2020-0417",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-154319182",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-0417"
    },
    {
      "cve": "CVE-2020-10768",
      "cwe": {
        "id": "CWE-440",
        "name": "Expected Behavior Violation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being \u0027force disabled\u0027 when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-10768"
    },
    {
      "cve": "CVE-2020-11301",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-11301"
    },
    {
      "cve": "CVE-2020-14305",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An out-of-bounds memory write flaw was found in how the Linux kernel\u2019s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-14305"
    },
    {
      "cve": "CVE-2020-14381",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux kernel\u2019s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-14381"
    },
    {
      "cve": "CVE-2020-15436",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-15436"
    },
    {
      "cve": "CVE-2020-24587",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:U/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-24587"
    },
    {
      "cve": "CVE-2020-25705",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw in ICMP packets in the Linux kernel was found to allow to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well. Kernel versions before 5.10 may be vulnerable to this issue.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-25705"
    },
    {
      "cve": "CVE-2020-26555",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-26555"
    },
    {
      "cve": "CVE-2020-26558",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-26558"
    },
    {
      "cve": "CVE-2020-29660",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-29660"
    },
    {
      "cve": "CVE-2020-29661",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-29661"
    },
    {
      "cve": "CVE-2021-0302",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-155287782",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0302"
    },
    {
      "cve": "CVE-2021-0305",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0305"
    },
    {
      "cve": "CVE-2021-0325",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-174238784",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0325"
    },
    {
      "cve": "CVE-2021-0326",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0326"
    },
    {
      "cve": "CVE-2021-0327",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-172935267",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0327"
    },
    {
      "cve": "CVE-2021-0328",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172670415",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0328"
    },
    {
      "cve": "CVE-2021-0329",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-171400004",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0329"
    },
    {
      "cve": "CVE-2021-0330",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-170732441",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0330"
    },
    {
      "cve": "CVE-2021-0331",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-170731783",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0331"
    },
    {
      "cve": "CVE-2021-0333",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-168504491",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0333"
    },
    {
      "cve": "CVE-2021-0334",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0334"
    },
    {
      "cve": "CVE-2021-0336",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-158219161",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0336"
    },
    {
      "cve": "CVE-2021-0337",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-157474195",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0337"
    },
    {
      "cve": "CVE-2021-0339",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0339"
    },
    {
      "cve": "CVE-2021-0341",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0341"
    },
    {
      "cve": "CVE-2021-0390",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174749461",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0390"
    },
    {
      "cve": "CVE-2021-0391",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172841550",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0391"
    },
    {
      "cve": "CVE-2021-0392",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-175124730",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0392"
    },
    {
      "cve": "CVE-2021-0393",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0393"
    },
    {
      "cve": "CVE-2021-0394",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0394"
    },
    {
      "cve": "CVE-2021-0396",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-160610106",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0396"
    },
    {
      "cve": "CVE-2021-0397",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174052148",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0397"
    },
    {
      "cve": "CVE-2021-0399",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176919394References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0399"
    },
    {
      "cve": "CVE-2021-0400",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0400"
    },
    {
      "cve": "CVE-2021-0429",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175074139",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0429"
    },
    {
      "cve": "CVE-2021-0431",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174149901",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0431"
    },
    {
      "cve": "CVE-2021-0433",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171221090",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0433"
    },
    {
      "cve": "CVE-2021-0434",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0434"
    },
    {
      "cve": "CVE-2021-0435",
      "cwe": {
        "id": "CWE-665",
        "name": "Improper Initialization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174150451",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0435"
    },
    {
      "cve": "CVE-2021-0436",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0436"
    },
    {
      "cve": "CVE-2021-0437",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0437"
    },
    {
      "cve": "CVE-2021-0438",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-152064592",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0438"
    },
    {
      "cve": "CVE-2021-0443",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-170474245",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0443"
    },
    {
      "cve": "CVE-2021-0444",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-178825358",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0444"
    },
    {
      "cve": "CVE-2021-0471",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444786",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0471"
    },
    {
      "cve": "CVE-2021-0473",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179687208",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0473"
    },
    {
      "cve": "CVE-2021-0474",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-177611958",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0474"
    },
    {
      "cve": "CVE-2021-0476",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-169252501",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0476"
    },
    {
      "cve": "CVE-2021-0478",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0478"
    },
    {
      "cve": "CVE-2021-0480",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-174493336",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0480"
    },
    {
      "cve": "CVE-2021-0481",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0481"
    },
    {
      "cve": "CVE-2021-0484",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-173720767",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0484"
    },
    {
      "cve": "CVE-2021-0506",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-181962311",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0506"
    },
    {
      "cve": "CVE-2021-0507",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181860042",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0507"
    },
    {
      "cve": "CVE-2021-0508",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176444154",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0508"
    },
    {
      "cve": "CVE-2021-0509",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444161",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0509"
    },
    {
      "cve": "CVE-2021-0510",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444622",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0510"
    },
    {
      "cve": "CVE-2021-0511",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-178055795",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0511"
    },
    {
      "cve": "CVE-2021-0512",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173843328References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0512"
    },
    {
      "cve": "CVE-2021-0513",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation. This could lead to local escalation of privilege via hidden services with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-156090809",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0513"
    },
    {
      "cve": "CVE-2021-0514",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9 Android-11 Android-8.1Android ID: A-162604069",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0514"
    },
    {
      "cve": "CVE-2021-0515",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-167389063",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0515"
    },
    {
      "cve": "CVE-2021-0516",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181660448",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0516"
    },
    {
      "cve": "CVE-2021-0519",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-176533109",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0519"
    },
    {
      "cve": "CVE-2021-0520",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-176237595",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0520"
    },
    {
      "cve": "CVE-2021-0521",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174661955",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0521"
    },
    {
      "cve": "CVE-2021-0522",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-174182139",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0522"
    },
    {
      "cve": "CVE-2021-0584",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-179289794",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0584"
    },
    {
      "cve": "CVE-2021-0585",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-184963385",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0585"
    },
    {
      "cve": "CVE-2021-0586",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-182584940",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0586"
    },
    {
      "cve": "CVE-2021-0587",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185259758",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0587"
    },
    {
      "cve": "CVE-2021-0588",
      "cwe": {
        "id": "CWE-668",
        "name": "Exposure of Resource to Wrong Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-177238342",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0588"
    },
    {
      "cve": "CVE-2021-0589",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180939982",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0589"
    },
    {
      "cve": "CVE-2021-0591",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179386960",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0591"
    },
    {
      "cve": "CVE-2021-0593",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179386068",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0593"
    },
    {
      "cve": "CVE-2021-0594",
      "cwe": {
        "id": "CWE-74",
        "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176445224",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0594"
    },
    {
      "cve": "CVE-2021-0596",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181346550",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0596"
    },
    {
      "cve": "CVE-2021-0597",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496502",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0597"
    },
    {
      "cve": "CVE-2021-0598",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180422108",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0598"
    },
    {
      "cve": "CVE-2021-0599",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175614289",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0599"
    },
    {
      "cve": "CVE-2021-0600",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-179042963",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0600"
    },
    {
      "cve": "CVE-2021-0601",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-180643802",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0601"
    },
    {
      "cve": "CVE-2021-0604",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179910660",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0604"
    },
    {
      "cve": "CVE-2021-0640",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-187957589",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0640"
    },
    {
      "cve": "CVE-2021-0641",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185235454",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0641"
    },
    {
      "cve": "CVE-2021-0642",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-185126149",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0642"
    },
    {
      "cve": "CVE-2021-0646",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process\u0027s SQL with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-153352319",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0646"
    },
    {
      "cve": "CVE-2021-0650",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-190286685",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0650"
    },
    {
      "cve": "CVE-2021-0651",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-67013844",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0651"
    },
    {
      "cve": "CVE-2021-0652",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185178568",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0652"
    },
    {
      "cve": "CVE-2021-0653",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-177931370",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0653"
    },
    {
      "cve": "CVE-2021-0682",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-159624555",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0682"
    },
    {
      "cve": "CVE-2021-0683",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-185398942",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0683"
    },
    {
      "cve": "CVE-2021-0684",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179839665",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0684"
    },
    {
      "cve": "CVE-2021-0687",
      "cwe": {
        "id": "CWE-834",
        "name": "Excessive Iteration"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-188913943",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0687"
    },
    {
      "cve": "CVE-2021-0688",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-161149543",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0688"
    },
    {
      "cve": "CVE-2021-0689",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-190188264",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0689"
    },
    {
      "cve": "CVE-2021-0690",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0690"
    },
    {
      "cve": "CVE-2021-0692",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-179289753",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0692"
    },
    {
      "cve": "CVE-2021-0695",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-184018316References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0695"
    },
    {
      "cve": "CVE-2021-0704",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-179338675",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0704"
    },
    {
      "cve": "CVE-2021-0706",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-193444889",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0706"
    },
    {
      "cve": "CVE-2021-0708",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-183262161",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0708"
    },
    {
      "cve": "CVE-2021-0870",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0870"
    },
    {
      "cve": "CVE-2021-0919",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-197336441",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0919"
    },
    {
      "cve": "CVE-2021-0920",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0920"
    },
    {
      "cve": "CVE-2021-0926",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-191053931",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0926"
    },
    {
      "cve": "CVE-2021-0928",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-188675581",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0928"
    },
    {
      "cve": "CVE-2021-0929",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-187527909References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0929"
    },
    {
      "cve": "CVE-2021-0930",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-181660091",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0930"
    },
    {
      "cve": "CVE-2021-0931",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-180747689",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0931"
    },
    {
      "cve": "CVE-2021-0933",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetooth device, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-172251622",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0933"
    },
    {
      "cve": "CVE-2021-0952",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user\u0027s contacts with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-195748381",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0952"
    },
    {
      "cve": "CVE-2021-0953",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-184046278",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0953"
    },
    {
      "cve": "CVE-2021-0961",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196046570References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0961"
    },
    {
      "cve": "CVE-2021-0963",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199754277",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0963"
    },
    {
      "cve": "CVE-2021-0964",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-193363621",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0964"
    },
    {
      "cve": "CVE-2021-0965",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194300867",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0965"
    },
    {
      "cve": "CVE-2021-0967",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199065614",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0967"
    },
    {
      "cve": "CVE-2021-0968",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197868577",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0968"
    },
    {
      "cve": "CVE-2021-0970",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-196970023",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0970"
    },
    {
      "cve": "CVE-2021-1972",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-1972"
    },
    {
      "cve": "CVE-2021-1976",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-1976"
    },
    {
      "cve": "CVE-2021-29647",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-29647"
    },
    {
      "cve": "CVE-2021-33909",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-33909"
    },
    {
      "cve": "CVE-2021-38204",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-38204"
    },
    {
      "cve": "CVE-2021-39621",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-185126319",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39621"
    },
    {
      "cve": "CVE-2021-39623",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194105348",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39623"
    },
    {
      "cve": "CVE-2021-39626",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695497",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39626"
    },
    {
      "cve": "CVE-2021-39627",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-185126549",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39627"
    },
    {
      "cve": "CVE-2021-39629",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197353344",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39629"
    },
    {
      "cve": "CVE-2021-39633",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150694665References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39633"
    },
    {
      "cve": "CVE-2021-39634",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204450605References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39634"
    },
    {
      "cve": "CVE-2022-20127",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221862119",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20127"
    },
    {
      "cve": "CVE-2022-20130",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224314979",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20130"
    },
    {
      "cve": "CVE-2022-20227",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216825460References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20227"
    },
    {
      "cve": "CVE-2022-20229",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224536184",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20229"
    },
    {
      "cve": "CVE-2022-20355",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-219498290",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20355"
    },
    {
      "cve": "CVE-2022-20411",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-232023771",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20411"
    },
    {
      "cve": "CVE-2022-20421",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20421"
    },
    {
      "cve": "CVE-2022-20422",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20422"
    },
    {
      "cve": "CVE-2022-20423",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239842288References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20423"
    },
    {
      "cve": "CVE-2022-20462",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-230356196",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20462"
    },
    {
      "cve": "CVE-2022-20466",
      "cwe": {
        "id": "CWE-1188",
        "name": "Initialization of a Resource with an Insecure Default"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user\u0027s password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-179725730",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20466"
    },
    {
      "cve": "CVE-2022-20468",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228450451",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20468"
    },
    {
      "cve": "CVE-2022-20469",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-230867224",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20469"
    },
    {
      "cve": "CVE-2022-20472",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239210579",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20472"
    },
    {
      "cve": "CVE-2022-20473",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239267173",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20473"
    },
    {
      "cve": "CVE-2022-20476",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-240936919",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20476"
    },
    {
      "cve": "CVE-2022-20483",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242459126",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20483"
    },
    {
      "cve": "CVE-2022-20498",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246465319",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20498"
    },
    {
      "cve": "CVE-2022-20500",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246540168",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20500"
    }
  ]
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "SIMATIC RF160B contain multiple vulnerabilities of different types that could allow an attacker to execute arbitrary code within the context of a privileged process.\n\nSiemens has released a new version for SIMATIC RF160B and recommends to update to the latest version.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-770721.html"
      },
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-770721.json"
      },
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-770721.pdf"
      },
      {
        "category": "self",
        "summary": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-770721.txt"
      }
    ],
    "title": "SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2",
    "tracking": {
      "current_release_date": "2024-03-12T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-770721",
      "initial_release_date": "2024-03-12T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-03-12T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "interim",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.2",
                "product": {
                  "name": "SIMATIC RF160B (6GT2003-0FA00)",
                  "product_id": "1",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GT2003-0FA00"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF160B (6GT2003-0FA00)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-14491",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker could cause a crash or potentially execute arbitrary code by sending specially crafted DNS responses to the DNSmasq process. In order to exploit this vulnerability, an attacker must be able to trigger DNS requests from the device, and must be in a privileged position to inject malicious DNS responses.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2017-14491"
    },
    {
      "cve": "CVE-2017-18509",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2017-18509"
    },
    {
      "cve": "CVE-2020-0338",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-0338"
    },
    {
      "cve": "CVE-2020-0417",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-154319182",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-0417"
    },
    {
      "cve": "CVE-2020-10768",
      "cwe": {
        "id": "CWE-440",
        "name": "Expected Behavior Violation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being \u0027force disabled\u0027 when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-10768"
    },
    {
      "cve": "CVE-2020-11301",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-11301"
    },
    {
      "cve": "CVE-2020-14305",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An out-of-bounds memory write flaw was found in how the Linux kernel\u2019s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-14305"
    },
    {
      "cve": "CVE-2020-14381",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw was found in the Linux kernel\u2019s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-14381"
    },
    {
      "cve": "CVE-2020-15436",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-15436"
    },
    {
      "cve": "CVE-2020-24587",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn\u0027t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:U/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-24587"
    },
    {
      "cve": "CVE-2020-25705",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A flaw in ICMP packets in the Linux kernel was found to allow to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well. Kernel versions before 5.10 may be vulnerable to this issue.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-25705"
    },
    {
      "cve": "CVE-2020-26555",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-26555"
    },
    {
      "cve": "CVE-2020-26558",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-26558"
    },
    {
      "cve": "CVE-2020-29660",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-29660"
    },
    {
      "cve": "CVE-2020-29661",
      "cwe": {
        "id": "CWE-667",
        "name": "Improper Locking"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2020-29661"
    },
    {
      "cve": "CVE-2021-0302",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-155287782",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0302"
    },
    {
      "cve": "CVE-2021-0305",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0305"
    },
    {
      "cve": "CVE-2021-0325",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-174238784",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0325"
    },
    {
      "cve": "CVE-2021-0326",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0326"
    },
    {
      "cve": "CVE-2021-0327",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-172935267",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0327"
    },
    {
      "cve": "CVE-2021-0328",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172670415",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0328"
    },
    {
      "cve": "CVE-2021-0329",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-171400004",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0329"
    },
    {
      "cve": "CVE-2021-0330",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-170732441",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0330"
    },
    {
      "cve": "CVE-2021-0331",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-170731783",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0331"
    },
    {
      "cve": "CVE-2021-0333",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-168504491",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0333"
    },
    {
      "cve": "CVE-2021-0334",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0334"
    },
    {
      "cve": "CVE-2021-0336",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-158219161",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0336"
    },
    {
      "cve": "CVE-2021-0337",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-157474195",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0337"
    },
    {
      "cve": "CVE-2021-0339",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0339"
    },
    {
      "cve": "CVE-2021-0341",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0341"
    },
    {
      "cve": "CVE-2021-0390",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174749461",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0390"
    },
    {
      "cve": "CVE-2021-0391",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172841550",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0391"
    },
    {
      "cve": "CVE-2021-0392",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-175124730",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0392"
    },
    {
      "cve": "CVE-2021-0393",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0393"
    },
    {
      "cve": "CVE-2021-0394",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0394"
    },
    {
      "cve": "CVE-2021-0396",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-160610106",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0396"
    },
    {
      "cve": "CVE-2021-0397",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174052148",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0397"
    },
    {
      "cve": "CVE-2021-0399",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176919394References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0399"
    },
    {
      "cve": "CVE-2021-0400",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0400"
    },
    {
      "cve": "CVE-2021-0429",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175074139",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0429"
    },
    {
      "cve": "CVE-2021-0431",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174149901",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0431"
    },
    {
      "cve": "CVE-2021-0433",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171221090",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0433"
    },
    {
      "cve": "CVE-2021-0434",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0434"
    },
    {
      "cve": "CVE-2021-0435",
      "cwe": {
        "id": "CWE-665",
        "name": "Improper Initialization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174150451",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0435"
    },
    {
      "cve": "CVE-2021-0436",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0436"
    },
    {
      "cve": "CVE-2021-0437",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0437"
    },
    {
      "cve": "CVE-2021-0438",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-152064592",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0438"
    },
    {
      "cve": "CVE-2021-0443",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-170474245",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0443"
    },
    {
      "cve": "CVE-2021-0444",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-178825358",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0444"
    },
    {
      "cve": "CVE-2021-0471",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444786",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0471"
    },
    {
      "cve": "CVE-2021-0473",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179687208",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0473"
    },
    {
      "cve": "CVE-2021-0474",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-177611958",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0474"
    },
    {
      "cve": "CVE-2021-0476",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-169252501",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0476"
    },
    {
      "cve": "CVE-2021-0478",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-169255797",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0478"
    },
    {
      "cve": "CVE-2021-0480",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-174493336",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0480"
    },
    {
      "cve": "CVE-2021-0481",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0481"
    },
    {
      "cve": "CVE-2021-0484",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-173720767",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0484"
    },
    {
      "cve": "CVE-2021-0506",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-181962311",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0506"
    },
    {
      "cve": "CVE-2021-0507",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181860042",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0507"
    },
    {
      "cve": "CVE-2021-0508",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176444154",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0508"
    },
    {
      "cve": "CVE-2021-0509",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444161",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0509"
    },
    {
      "cve": "CVE-2021-0510",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444622",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0510"
    },
    {
      "cve": "CVE-2021-0511",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-178055795",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0511"
    },
    {
      "cve": "CVE-2021-0512",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173843328References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0512"
    },
    {
      "cve": "CVE-2021-0513",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation. This could lead to local escalation of privilege via hidden services with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-156090809",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0513"
    },
    {
      "cve": "CVE-2021-0514",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9 Android-11 Android-8.1Android ID: A-162604069",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0514"
    },
    {
      "cve": "CVE-2021-0515",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-167389063",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0515"
    },
    {
      "cve": "CVE-2021-0516",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181660448",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0516"
    },
    {
      "cve": "CVE-2021-0519",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-176533109",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0519"
    },
    {
      "cve": "CVE-2021-0520",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-176237595",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0520"
    },
    {
      "cve": "CVE-2021-0521",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174661955",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0521"
    },
    {
      "cve": "CVE-2021-0522",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-174182139",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0522"
    },
    {
      "cve": "CVE-2021-0584",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-179289794",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0584"
    },
    {
      "cve": "CVE-2021-0585",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-184963385",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0585"
    },
    {
      "cve": "CVE-2021-0586",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-182584940",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0586"
    },
    {
      "cve": "CVE-2021-0587",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185259758",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0587"
    },
    {
      "cve": "CVE-2021-0588",
      "cwe": {
        "id": "CWE-668",
        "name": "Exposure of Resource to Wrong Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-177238342",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0588"
    },
    {
      "cve": "CVE-2021-0589",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180939982",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0589"
    },
    {
      "cve": "CVE-2021-0591",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179386960",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0591"
    },
    {
      "cve": "CVE-2021-0593",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179386068",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0593"
    },
    {
      "cve": "CVE-2021-0594",
      "cwe": {
        "id": "CWE-74",
        "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote (proximal, NFC) escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176445224",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0594"
    },
    {
      "cve": "CVE-2021-0596",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181346550",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0596"
    },
    {
      "cve": "CVE-2021-0597",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496502",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0597"
    },
    {
      "cve": "CVE-2021-0598",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of ConfirmConnectActivity.java, there is a possible pairing of untrusted Bluetooth devices due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-180422108",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0598"
    },
    {
      "cve": "CVE-2021-0599",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175614289",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0599"
    },
    {
      "cve": "CVE-2021-0600",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-179042963",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0600"
    },
    {
      "cve": "CVE-2021-0601",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-180643802",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0601"
    },
    {
      "cve": "CVE-2021-0604",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-179910660",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0604"
    },
    {
      "cve": "CVE-2021-0640",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-187957589",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0640"
    },
    {
      "cve": "CVE-2021-0641",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185235454",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0641"
    },
    {
      "cve": "CVE-2021-0642",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-185126149",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0642"
    },
    {
      "cve": "CVE-2021-0646",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if the user can also inject a printf into a privileged process\u0027s SQL with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-153352319",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0646"
    },
    {
      "cve": "CVE-2021-0650",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-190286685",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0650"
    },
    {
      "cve": "CVE-2021-0651",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-67013844",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0651"
    },
    {
      "cve": "CVE-2021-0652",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-185178568",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0652"
    },
    {
      "cve": "CVE-2021-0653",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-177931370",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0653"
    },
    {
      "cve": "CVE-2021-0682",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-159624555",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0682"
    },
    {
      "cve": "CVE-2021-0683",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-185398942",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0683"
    },
    {
      "cve": "CVE-2021-0684",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-179839665",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0684"
    },
    {
      "cve": "CVE-2021-0687",
      "cwe": {
        "id": "CWE-834",
        "name": "Excessive Iteration"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-188913943",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0687"
    },
    {
      "cve": "CVE-2021-0688",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-161149543",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0688"
    },
    {
      "cve": "CVE-2021-0689",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-190188264",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0689"
    },
    {
      "cve": "CVE-2021-0690",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0690"
    },
    {
      "cve": "CVE-2021-0692",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9 Android-10Android ID: A-179289753",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0692"
    },
    {
      "cve": "CVE-2021-0695",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get_sock_stat of xt_qtaguid.c, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-184018316References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0695"
    },
    {
      "cve": "CVE-2021-0704",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-179338675",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0704"
    },
    {
      "cve": "CVE-2021-0706",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-193444889",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0706"
    },
    {
      "cve": "CVE-2021-0708",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-183262161",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0708"
    },
    {
      "cve": "CVE-2021-0870",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0870"
    },
    {
      "cve": "CVE-2021-0919",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-197336441",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0919"
    },
    {
      "cve": "CVE-2021-0920",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0920"
    },
    {
      "cve": "CVE-2021-0926",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-191053931",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0926"
    },
    {
      "cve": "CVE-2021-0928",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-188675581",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0928"
    },
    {
      "cve": "CVE-2021-0929",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-187527909References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0929"
    },
    {
      "cve": "CVE-2021-0930",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over NFC with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-181660091",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0930"
    },
    {
      "cve": "CVE-2021-0931",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-180747689",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0931"
    },
    {
      "cve": "CVE-2021-0933",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetooth device, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-172251622",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0933"
    },
    {
      "cve": "CVE-2021-0952",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user\u0027s contacts with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-195748381",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0952"
    },
    {
      "cve": "CVE-2021-0953",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-184046278",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0953"
    },
    {
      "cve": "CVE-2021-0961",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196046570References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0961"
    },
    {
      "cve": "CVE-2021-0963",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199754277",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0963"
    },
    {
      "cve": "CVE-2021-0964",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-193363621",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0964"
    },
    {
      "cve": "CVE-2021-0965",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user\u0027s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194300867",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0965"
    },
    {
      "cve": "CVE-2021-0967",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-199065614",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0967"
    },
    {
      "cve": "CVE-2021-0968",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197868577",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0968"
    },
    {
      "cve": "CVE-2021-0970",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-196970023",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-0970"
    },
    {
      "cve": "CVE-2021-1972",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-1972"
    },
    {
      "cve": "CVE-2021-1976",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-1976"
    },
    {
      "cve": "CVE-2021-29647",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-29647"
    },
    {
      "cve": "CVE-2021-33909",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-33909"
    },
    {
      "cve": "CVE-2021-38204",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-38204"
    },
    {
      "cve": "CVE-2021-39621",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-185126319",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39621"
    },
    {
      "cve": "CVE-2021-39623",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194105348",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39623"
    },
    {
      "cve": "CVE-2021-39626",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695497",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39626"
    },
    {
      "cve": "CVE-2021-39627",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-185126549",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39627"
    },
    {
      "cve": "CVE-2021-39629",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197353344",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39629"
    },
    {
      "cve": "CVE-2021-39633",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150694665References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39633"
    },
    {
      "cve": "CVE-2021-39634",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204450605References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2021-39634"
    },
    {
      "cve": "CVE-2022-20127",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221862119",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20127"
    },
    {
      "cve": "CVE-2022-20130",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224314979",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20130"
    },
    {
      "cve": "CVE-2022-20227",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216825460References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20227"
    },
    {
      "cve": "CVE-2022-20229",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224536184",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20229"
    },
    {
      "cve": "CVE-2022-20355",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-219498290",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20355"
    },
    {
      "cve": "CVE-2022-20411",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-232023771",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20411"
    },
    {
      "cve": "CVE-2022-20421",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20421"
    },
    {
      "cve": "CVE-2022-20422",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20422"
    },
    {
      "cve": "CVE-2022-20423",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239842288References: Upstream kernel",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20423"
    },
    {
      "cve": "CVE-2022-20462",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-230356196",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20462"
    },
    {
      "cve": "CVE-2022-20466",
      "cwe": {
        "id": "CWE-1188",
        "name": "Initialization of a Resource with an Insecure Default"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user\u0027s password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-179725730",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20466"
    },
    {
      "cve": "CVE-2022-20468",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228450451",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20468"
    },
    {
      "cve": "CVE-2022-20469",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-230867224",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20469"
    },
    {
      "cve": "CVE-2022-20472",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239210579",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20472"
    },
    {
      "cve": "CVE-2022-20473",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239267173",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20473"
    },
    {
      "cve": "CVE-2022-20476",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-240936919",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20476"
    },
    {
      "cve": "CVE-2022-20483",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242459126",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20483"
    },
    {
      "cve": "CVE-2022-20498",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246465319",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20498"
    },
    {
      "cve": "CVE-2022-20500",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246540168",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "title": "CVE-2022-20500"
    }
  ]
}