[{"CVE":"CVE-2019-15126","severity":"moderate","public_date":"2020-02-05T00:00:00Z","advisories":[],"bugzilla":"1807728","bugzilla_description":"CVE-2019-15126 linux-firmware: Transmission of data encrypted with an all-zero session key after disassociation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-300","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15126.json","cvss3_scoring_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.1"},{"CVE":"CVE-2019-11090","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1788755","bugzilla_description":"CVE-2019-11090 CVE-2019-16863 hw: ECDSA signature timing vulnerabilities in TPM module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11090.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2019-16863","severity":"moderate","public_date":"2020-01-08T00:00:00Z","advisories":[],"bugzilla":"1788755","bugzilla_description":"CVE-2019-11090 CVE-2019-16863 hw: ECDSA signature timing vulnerabilities in TPM module","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16863.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.8"},{"CVE":"CVE-2018-5383","severity":"important","public_date":"2018-07-23T00:00:00Z","advisories":["RHSA-2019:2169"],"bugzilla":"1614159","bugzilla_description":"CVE-2018-5383 kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-325","affected_packages":["linux-firmware-0:20190429-72.gitddde598.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5383.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-5715","severity":"important","public_date":"2018-01-03T22:00:00Z","advisories":["RHBA-2018:0042"],"bugzilla":"1519780","bugzilla_description":"CVE-2017-5715 hw: cpu: speculative execution branch target injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-226->CWE-385->CWE-200","affected_packages":["dracut-0:033-502.el7_4.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5715.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"5.6"}]