[Secure-testing-commits] r30010 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-11-13 07:53:12 +0000 (Thu, 13 Nov 2014)
New Revision: 30010

Modified:
   data/CVE/list
Log:
Add CVE-2014-8714/wireshark

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-13 07:51:29 UTC (rev 30009)
+++ data/CVE/list	2014-11-13 07:53:12 UTC (rev 30010)
@@ -13,23 +13,27 @@
 CVE-2014-8716 [crafted jpeg file could lead to DOS]
 	- imagemagick <unfixed> (bug #768494)
 	NOTE: http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456
+CVE-2014-8714 [TN5250 infinite loop]
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-23.html
+	NOTE: Versions 1.12.0 to 1.12.1, and 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11.
 CVE-2014-8713 [NCP dissector crashes]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-22.html
-	NOTE: versions 1.12.0 to 1.12.1, and 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11.
+	NOTE: Versions 1.12.0 to 1.12.1, and 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11.
 CVE-2014-8712 [NCP dissector crashes]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-22.html
-	NOTE: versions 1.12.0 to 1.12.1, and 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11.
+	NOTE: Versions 1.12.0 to 1.12.1, and 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11.
 CVE-2014-8711 [AMQP dissector crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-21.html
-	NOTE: versions 1.12.0 to 1.12.1, and 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11
+	NOTE: Versions 1.12.0 to 1.12.1, and 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11.
 	TODO: check
 CVE-2014-8710 [SigComp dissector crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-20.html
-	NOTE: versions 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11
+	NOTE: Versions 1.10.0 to 1.10.10. It is fixed in versions 1.12.2 and 1.10.11.
 	TODO: check
 CVE-2014-8709 [mac80211 plain text leak]
 	- linux 3.14.2-1