Author: sectracker
Date: 2016-11-02 21:10:12 +0000 (Wed, 02 Nov 2016)
New Revision: 45907
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-11-02 20:59:38 UTC (rev 45906)
+++ data/CVE/list 2016-11-02 21:10:12 UTC (rev 45907)
@@ -1,3 +1,15 @@
+CVE-2016-9146
+ RESERVED
+CVE-2016-9145
+ RESERVED
+CVE-2016-9144
+ RESERVED
+CVE-2016-9143
+ RESERVED
+CVE-2016-9142
+ RESERVED
+CVE-2016-9141
+ RESERVED
CVE-2016-XXXX [Image-Info: XXE in SVG files]
- libimage-info-perl <unfixed> (bug #842891)
NOTE: https://rt.cpan.org/Public/Bug/Display.html?id=118099
@@ -42,10 +54,12 @@
CVE-2016-9121
RESERVED
CVE-2016-9140 [RCE]
+ RESERVED
- zabbix <unfixed>
NOTE: https://www.exploit-db.com/exploits/39937/
TODO: check
CVE-2016-9139 [An attacker could trick an authenticated agent or customer into
opening a malicious attachment which could lead to the execution of JavaScript
in OTRS context]
+ RESERVED
- otrs2 <unfixed>
NOTE:
https://www.otrs.com/security-advisory-2016-02-security-update-otrs/
NOTE: http://www.openwall.com/lists/oss-security/2016/11/01/5
@@ -564,6 +578,7 @@
NOTE: http://www.openwall.com/lists/oss-security/2016/10/25/3
CVE-2016-9011 [memory allocation failure in wmf_malloc (api.c)]
RESERVED
+ {DLA-694-1}
- libwmf <unfixed> (bug #842090)
[jessie] - libwmf <no-dsa> (Minor issue)
NOTE: http://www.openwall.com/lists/oss-security/2016/10/18/9
@@ -1088,11 +1103,13 @@
NOTE:
https://github.com/torproject/tor/commit/3cea86eb2fbb65949673eb4ba8ebb695c87a57ce
NOTE: http://www.openwall.com/lists/oss-security/2016/10/18/11
CVE-2016-9138 [Issues from Upstream bug #73147 still unfixed in 5.6.27 and
7.0.12]
+ RESERVED
- php7.0 <unfixed>
- php5 <unfixed>
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=73147
NOTE: http://www.openwall.com/lists/oss-security/2016/11/01/7
CVE-2016-9137 [Use After Free in unserialize()]
+ RESERVED
{DSA-3698-1}
- php7.0 7.0.12-1
- php5 <unfixed>
@@ -2219,6 +2236,7 @@
NOTE: http://www.talosintelligence.com/reports/TALOS-2016-0193/
NOTE: https://github.com/uclouvain/openjpeg/pull/820
CVE-2016-8331 (An exploitable remote code execution vulnerability exists in
the ...)
+ {DLA-693-1}
- tiff <unfixed>
- tiff3 <removed>
[wheezy] - tiff3 <not-affected> (Does not ship libtiff tools)
@@ -3615,6 +3633,7 @@
RESERVED
CVE-2016-7999 [Server Side Request Forgery]
RESERVED
+ {DLA-695-1}
- spip 3.1.3-1
NOTE: http://seclists.org/fulldisclosure/2016/Oct/78
NOTE: https://core.spip.net/projects/spip/repository/revisions/23180
(master)
@@ -3623,6 +3642,7 @@
NOTE: reproducible in Wheezy (2.1.17-1+deb7u5) and Jessie
(3.0.17-2+deb8u2)
CVE-2016-7998 [Template Compiler/Composer PHP Code Execution]
RESERVED
+ {DLA-695-1}
- spip 3.1.3-1
NOTE: http://seclists.org/fulldisclosure/2016/Oct/76
NOTE: https://core.spip.net/projects/spip/repository/revisions/23186
(master)
@@ -3686,6 +3706,7 @@
RESERVED
CVE-2016-7982 [File Enumeration / Path Traversal]
RESERVED
+ {DLA-695-1}
- spip 3.1.3-1
NOTE: http://seclists.org/fulldisclosure/2016/Oct/73
NOTE: https://core.spip.net/projects/spip/repository/revisions/23180
(master)
@@ -3706,6 +3727,7 @@
NOTE: reproducible in Wheezy (2.1.17-1+deb7u5) and Jessie
(3.0.17-2+deb8u2)
CVE-2016-7981 [Reflected Cross-Site Scripting]
RESERVED
+ {DLA-695-1}
- spip 3.1.3-1
NOTE: http://seclists.org/fulldisclosure/2016/Oct/68
NOTE: https://core.spip.net/projects/spip/repository/revisions/23200
(master)
@@ -3714,6 +3736,7 @@
NOTE: reproducible in Wheezy (2.1.17-1+deb7u5) and Jessie
(3.0.17-2+deb8u2)
CVE-2016-7980 [Cross-Site Request Forgery]
RESERVED
+ {DLA-695-1}
- spip 3.1.3-1
NOTE: http://seclists.org/fulldisclosure/2016/Oct/67
NOTE: https://core.spip.net/projects/spip/repository/revisions/23200
(master)
@@ -4075,8 +4098,7 @@
RESERVED
CVE-2016-7856
RESERVED
-CVE-2016-7855
- RESERVED
+CVE-2016-7855 (Use-after-free vulnerability in Adobe Flash Player before
23.0.0.205 ...)
NOT-FOR-US: Adobe Flash
CVE-2016-7854 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat
Reader DC ...)
TODO: check
@@ -9353,7 +9375,7 @@
NOTE: http://www.openwall.com/lists/oss-security/2016/07/13/5
CVE-2016-6223 [tiff: information leak in libtiff/tif_read.c]
RESERVED
- {DLA-610-1}
+ {DLA-693-1 DLA-610-1}
- tiff 4.0.6-2 (bug #842270)
- tiff3 <removed>
NOTE: http://www.openwall.com/lists/oss-security/2016/07/13/3
@@ -10879,6 +10901,7 @@
NOT-FOR-US: Misys
CVE-2016-5652 [heap based buffer overflow in LibTIFFs TIFF2PDF tool]
RESERVED
+ {DLA-693-1}
- tiff <unfixed> (bug #842361)
- tiff3 <removed>
[wheezy] - tiff3 <not-affected> (Does not ship libtiff tools)
@@ -12455,6 +12478,7 @@
RESERVED
CVE-2016-5319 [libtiff: PackBitsEncode heap buffer overflow]
RESERVED
+ {DLA-693-1}
- tiff <unfixed> (bug #842046)
- tiff3 <removed>
[wheezy] - tiff3 <not-affected> (tools like bmp2tiff not shipped by
tiff3 source package)
@@ -12465,6 +12489,7 @@
NOTE: bmp2tiff was removed in 4.0.6-3, but the affected function is
still present
CVE-2016-5318 [libtiff: stack buffer overflow in _TIFFVGetField function]
RESERVED
+ {DLA-693-1 DLA-692-1}
- tiff <unfixed> (bug #842043)
- tiff3 <removed>
NOTE: _TIFFVGetField isn't specific to thumbnail tool
@@ -13269,6 +13294,7 @@
TODO: probably not affected since orig.tar.gz of src:mplayer does not
include libavcodec, ffmpeg/libav affected?
CVE-2016-5102 [gif2tiff: buffer overflow in readgifimage()]
RESERVED
+ {DLA-693-1}
- tiff 4.0.6-3
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <removed> (unimportant)
@@ -17633,6 +17659,7 @@
CVE-2016-3635 (SAP Netweaver 7.4 allows remote authenticated users to bypass
an ...)
TODO: check
CVE-2016-3634 (The tagCompare function in tif_dirinfo.c in the thumbnail tool
in ...)
+ {DLA-693-1}
- tiff <unfixed>
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <removed> (unimportant)
@@ -17642,6 +17669,7 @@
NOTE: Upstream will remove thumbnail from 4.0.7 release
NOTE: No patch available. Issue marked as wontfix by upstream.
CVE-2016-3633 (The setrow function in the thumbnail tool in LibTIFF 4.0.6 and
earlier ...)
+ {DLA-693-1}
- tiff 4.0.6-3 (bug #842046)
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <removed> (unimportant)
@@ -17652,6 +17680,7 @@
NOTE: No patch available. Issue marked as wontfix by upstream.
NOTE: thumbnail(1) removed in 4.0.6-3
CVE-2016-3632 (The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6
and ...)
+ {DLA-693-1}
- tiff <unfixed>
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <removed> (unimportant)
@@ -17662,6 +17691,7 @@
NOTE: No patch available. Issue marked as wontfix by upstream.
NOTE: thumbnail(1) removed in 4.0.6-3, but vulnerable library code
still present
CVE-2016-3631 (The (1) cpStrips and (2) cpTiles functions in the thumbnail
tool in ...)
+ {DLA-693-1}
- tiff 4.0.6-3 (bug #820366)
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <removed> (unimportant)
@@ -17709,6 +17739,7 @@
- tiff3 <not-affected> (tiff tools not built)
NOTE: http://www.openwall.com/lists/oss-security/2016/04/07/5
CVE-2016-3621 (The LZWEncode function in tif_lzw.c in the bmp2tiff tool in
LibTIFF ...)
+ {DLA-693-1}
- tiff <unfixed> (low; bug #820364)
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <not-affected> (tiff tools not built)
@@ -17717,6 +17748,7 @@
NOTE: Utility bmp2tiff has been removed from upstream LibTIFF
NOTE: bmp2tiff was removed in 4.0.6-3, but the affected function is
still present
CVE-2016-3620 (The ZIPEncode function in tif_zip.c in the bmp2tiff tool in
LibTIFF ...)
+ {DLA-693-1}
- tiff <unfixed> (low; bug #820363)
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <not-affected> (tiff tools not built)
@@ -17725,6 +17757,7 @@
NOTE: Utility bmp2tiff has been removed from upstream LibTIFF
NOTE: bmp2tiff was removed in 4.0.6-3, but the affected function is
still present
CVE-2016-3619 (The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff
tool in ...)
+ {DLA-693-1}
- tiff <unfixed> (low; bug #820362)
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <not-affected> (tiff tools not built)
@@ -18716,7 +18749,7 @@
CVE-2016-3187 (The Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows
remote ...)
NOT-FOR-US: Prepopulate module for Drupal
CVE-2016-3186 (Buffer overflow in the readextension function in gif2tiff.c in
LibTIFF ...)
- {DLA-610-1}
+ {DLA-693-1 DLA-610-1}
- tiff 4.0.6-3 (bug #819972)
[jessie] - tiff <no-dsa> (Minor issue)
- tiff3 <removed> (unimportant)
@@ -26278,6 +26311,7 @@
NOTE: https://www.phpmyadmin.net/security/PMASA-2015-6/
NOTE: non-issue for Debian-packaged version
CVE-2015-8668 (Heap-based buffer overflow in the PackBitsPreEncode function in
...)
+ {DLA-693-1}
- tiff <unfixed> (bug #842046)
- tiff3 <removed>
[wheezy] - tiff3 <not-affected> (Does not ship libtiff tools)
@@ -32592,6 +32626,7 @@
[wheezy] - giflib 4.1.6-10+deb7u1
NOTE: Upstream fix
http://sourceforge.net/p/giflib/code/ci/179510be300bf11115e37528d79619b53c884a63
CVE-2015-7554 (The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6
allows ...)
+ {DLA-693-1 DLA-692-1}
- tiff <unfixed> (bug #809066; bug #842043)
- tiff3 <removed>
NOTE: http://www.openwall.com/lists/oss-security/2015/12/26/7
@@ -59253,7 +59288,7 @@
NOTE: The tiff3 source package doesn't build the TIFF tools, but most
of these bugs are in the library
CVE-2014-8128 [out-of-bounds write]
RESERVED
- {DSA-3273-1 DLA-610-1 DLA-221-1}
+ {DSA-3273-1 DLA-693-1 DLA-610-1 DLA-221-1}
- tiff 4.0.3-12.3 (bug #776185)
- tiff3 <removed>
NOTE: Advisory:
http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
