[Secure-testing-commits] r22183 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-05-06 09:05:01 +0000 (Mon, 06 May 2013)
New Revision: 22183

Modified:
   data/CVE/list
Log:
update notes for CVE-2013-2016

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-06 09:03:31 UTC (rev 22182)
+++ data/CVE/list	2013-05-06 09:05:01 UTC (rev 22183)
@@ -2908,8 +2908,12 @@
 	NOTE: http://marc.info/?l=linux-netdev&m=127310770900442&w=3
 CVE-2013-2016 [qemu: virtio: out-of-bounds config space access]
 	RESERVED
+	- qemu <undetermined>
+	- qemu-kvm <undetermined>
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2013-04/msg05013.html
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2013-04/msg05254.html
+	NOTE: http://marc.info/?l=oss-security&m=136722323931507&w=2
+	NOTE: Only pratically affects virtio-rng according to oss-reference (and if mmap_min_addr = 0)
 	TODO: check
 CVE-2013-2015 (The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel ...)
 	- linux <unfixed> (low)