conversion for openssl records

Signed-off-by: Weston Steimel <commits@weston.slmail.me>
anchore · May 21, 2024 · e81c7b6 · e81c7b6
1 parent a2ba0e0
commit e81c7b6
Show file tree

Hide file tree

Showing 2 changed files with 106 additions and 0 deletions.
diff --git a/data/anchore/2023/CVE-2023-6237.json b/data/anchore/2023/CVE-2023-6237.json
@@ -0,0 +1,49 @@
+{
+  "additionalMetadata": {
+    "cna": "openssl",
+    "cveId": "CVE-2023-6237",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d",
+      "https://www.openssl.org/news/secadv/20240115.txt",
+      "http://www.openwall.com/lists/oss-security/2024/03/11/1",
+      "https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294",
+      "https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"
+        ],
+        "product": "OpenSSL",
+        "vendor": "OpenSSL",
+        "versions": [
+          {
+            "lessThan": "3.0.13",
+            "status": "affected",
+            "version": "3.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.1.5",
+            "status": "affected",
+            "version": "3.1.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.2.1",
+            "status": "affected",
+            "version": "3.2.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2511.json b/data/anchore/2024/CVE-2024-2511.json
@@ -0,0 +1,57 @@
+{
+  "additionalMetadata": {
+    "cna": "openssl",
+    "cveId": "CVE-2024-2511",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "http://www.openwall.com/lists/oss-security/2024/04/08/5",
+      "https://security.netapp.com/advisory/ntap-20240503-0013/",
+      "https://www.openssl.org/news/secadv/20240408.txt",
+      "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640",
+      "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08",
+      "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d",
+      "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"
+        ],
+        "product": "OpenSSL",
+        "vendor": "OpenSSL",
+        "versions": [
+          {
+            "lessThan": "3.2.2",
+            "status": "affected",
+            "version": "3.2.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.1.6",
+            "status": "affected",
+            "version": "3.1.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.0.14",
+            "status": "affected",
+            "version": "3.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "1.1.1y",
+            "status": "affected",
+            "version": "1.1.1",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}