[Secure-testing-commits] r24114 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-10-22 07:09:40 +0000 (Tue, 22 Oct 2013)
New Revision: 24114

Modified:
   data/CVE/list
Log:
Add CVE-2013-4401 from external check

NOTE: still mark as todo as I wanted to verify the versions

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-22 06:04:51 UTC (rev 24113)
+++ data/CVE/list	2013-10-22 07:09:40 UTC (rev 24114)
@@ -3871,8 +3871,12 @@
 	{DSA-2774-1 DSA-2773-1}
 	- gnupg2 2.0.22-1 (bug #725433)
 	- gnupg 1.4.15-1 (bug #725439)
-CVE-2013-4401
+CVE-2013-4401 [unintended API access due to incorrect permissions checks]
 	RESERVED
+	- libvirt <unfixed>
+	NOTE: introduced in libvirt 1.1.0
+	NOTE: http://libvirt.org/git/?p=libvirt.git;a=commit;h=57687fd6bf7f6e1b3662c52f3f26c06ab19dc96c
+	TODO: check
 CVE-2013-4400
 	RESERVED
 CVE-2013-4399 [unprivileged user can crash libvirtd when ACLs are enabled]