[Secure-testing-commits] r26885 - data/CVE

Fri May 9 14:01:56 UTC 2014

Author: fgeek-guest
Date: 2014-05-09 14:01:56 +0000 (Fri, 09 May 2014)
New Revision: 26885

Modified:
   data/CVE/list
Log:
new linux issue

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-05-09 12:13:17 UTC (rev 26884)
+++ data/CVE/list	2014-05-09 14:01:56 UTC (rev 26885)
@@ -1,3 +1,9 @@
+CVE-2014-XXXX [linux: filter: prevent nla extensions to peek beyond the end of the message]
+	- linux <unfixed>
+	- linux-2.6 <removed>
+	NOTE: Upstream fix https://git.kernel.org/linus/05ab8f2647e4221cbdb3856dd7d32bd5407316b3
+	NOTE: Introduced by https://git.kernel.org/linus/4738c1db1593687713869fa69e733eebc7b0d6d8
+	NOTE: https://git.kernel.org/linus/d214c7537bbf2f247991fb65b3420b0b3d712c67
 CVE-2014-3426 [denial of service]
 	- mosaic 2.7b5-3
 CVE-2014-3425 [denial of service]


