Author: carnil
Date: 2017-06-27 18:46:50 +0000 (Tue, 27 Jun 2017)
New Revision: 52958
Modified:
data/CVE/list
Log:
Add temporary description for CVE-2017-9445 and more notes
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-06-27 18:44:44 UTC (rev 52957)
+++ data/CVE/list 2017-06-27 18:46:50 UTC (rev 52958)
@@ -2639,11 +2639,14 @@
RESERVED
CVE-2017-9446
RESERVED
-CVE-2017-9445
+CVE-2017-9445 [Out-of-bounds write in systemd-resolved with crafted TCP
payload]
RESERVED
- systemd <unfixed>
[stretch] - systemd <no-dsa> (Minor issue, systemd-resolved not enabled
by default)
[jessie] - systemd <not-affected> (Vulnerable code not present)
+ [wheezy] - systemd <not-affected> (Vulnerable code not present)
+ NOTE: Introduced by:
https://github.com/systemd/systemd/commit/a0166609f782da91710dea9183d1bf138538db37
+ NOTE: http://www.openwall.com/lists/oss-security/2017/06/27/8
CVE-2017-9444 (BigTree CMS through 4.2.18 has CSRF related to the ...)
NOT-FOR-US: BigTree CMS
CVE-2017-9443 (** DISPUTED ** BigTree CMS through 4.2.18 allows remote
authenticated ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
