[Secure-testing-commits] r25801 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-02-20 05:38:16 +0000 (Thu, 20 Feb 2014)
New Revision: 25801

Modified:
   data/CVE/list
Log:
CVE assigned for maradns

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-20 05:36:05 UTC (rev 25800)
+++ data/CVE/list	2014-02-20 05:38:16 UTC (rev 25801)
@@ -1,13 +1,16 @@
-CVE-2014-XXXX [DoS due to incorrect bounds checking on certain strings]
-	- maradns <unfixed>
-	NOTE: https://github.com/samboy/MaraDNS/commit/f015495d221f1c2b2f10db38e87cecf3839d6093
-	NOTE: https://github.com/samboy/MaraDNS/commit/2cfcd2397cb8168d4aa4594839fabe88420d03c3
-	TODO: check
 CVE-2014-2039 [remote code execution / information leak]
 	- percona-toolkit <unfixed>
 	TODO: check and report to BTS
 CVE-2014-2037 [incomplete fix for CVE-2013-6466 DoS in openSwan]
 	- openswan <unfixed>
+CVE-2014-2032 [missing input validation]
+	- maradns <unfixed>
+	NOTE: https://github.com/samboy/MaraDNS/commit/2cfcd2397cb8168d4aa4594839fabe88420d03c3
+	TODO: check
+CVE-2014-2031 [logic error]
+	- maradns <unfixed>
+	NOTE: https://github.com/samboy/MaraDNS/commit/f015495d221f1c2b2f10db38e87cecf3839d6093
+	TODO: check
 CVE-2014-2030
 	- imagemagick <unfixed>
 	NOTE: for the issue in newer imagemagick versions using "L%06ld" string.