vulnrichment
vulnrichment copied to clipboard
Incorrect CPE assignments, CVE-2024-45402, CVE-2024-45396
CVE-2024-45396
"affected": [
{
"vendor": "h2o",
"product": "quicly",
"versions": [
....
"cpe:2.3:a:h20:quickly:*:*:*:*:*:*:*:*"
note it's h20 (twenty) and quickly with k.
For CVE-2024-45402
"affected": [
{
"vendor": "h2o",
"product": "picotls",
"versions": [
...
"cpes": [
"cpe:2.3:a:h20:picotis:*:*:*:*:*:*:*:*"
],
Note that the CPE contains h20 and picotis (with i instead of l as in tls).