[Secure-testing-commits] r20614 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-12-06 07:27:23 +0000 (Thu, 06 Dec 2012)
New Revision: 20614

Modified:
   data/CVE/list
Log:
new CVE IDs have been assigned for recent wireshark issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-12-06 07:21:16 UTC (rev 20613)
+++ data/CVE/list	2012-12-06 07:27:23 UTC (rev 20614)
@@ -13,27 +13,38 @@
 CVE-2012-6063 (Double free vulnerability in the sftp_mkdir function in sftp.c in ...)
 	- libssh 0.5.3-1
 CVE-2012-6062 (The dissect_rtcp_app function in epan/dissectors/packet-rtcp.c in the ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6061 (The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6060 (Integer overflow in the dissect_iscsi_pdu function in ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6059 (The dissect_isakmp function in epan/dissectors/packet-isakmp.c in the ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6058 (Integer overflow in the dissect_icmpv6 function in ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6057 (The dissect_eigrp_metric_comm function in ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6056 (Integer overflow in the dissect_sack_chunk function in ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6055 (epan/dissectors/packet-3g-a11.c in the 3GPP2 A11 dissector in ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6054 (The dissect_sflow_245_address_type function in ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6053 (epan/dissectors/packet-usb.c in the USB dissector in Wireshark 1.6.x ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2012-6052 (Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain ...)
-	TODO: check
+	- wireshark <unfixed> (unimportant)
+	NOTE: not suitable for code injection
 CVE-2011-5246
 	RESERVED
 CVE-2013-0100
@@ -1318,48 +1329,26 @@
 	RESERVED
 CVE-2012-5602
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5601
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5600
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5599
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5598
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5597
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5596
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5595
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5594
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5593
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5592
 	REJECTED
-	- wireshark <unfixed> (unimportant)
-	NOTE: not suitable for code injection
 CVE-2012-5591
 	RESERVED
 CVE-2012-5590