[Secure-testing-commits] r30029 - data/CVE

Thu Nov 13 16:17:55 UTC 2014

Author: carnil
Date: 2014-11-13 16:17:55 +0000 (Thu, 13 Nov 2014)
New Revision: 30029

Modified:
   data/CVE/list
Log:
Add CVE-2014-7843/linux

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-11-13 16:17:28 UTC (rev 30028)
+++ data/CVE/list	2014-11-13 16:17:55 UTC (rev 30029)
@@ -1826,8 +1826,12 @@
 	RESERVED
 CVE-2014-7844
 	RESERVED
-CVE-2014-7843
+CVE-2014-7843 [copying from /dev/zero causes local DoS]
 	RESERVED
+	- linux <unfixed>
+	- linux-2.6 <removed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1163744
+	NOTE: Upstream patch proposal: https://lkml.org/lkml/2014/11/12/584
 CVE-2014-7842
 	RESERVED
 CVE-2014-7841 [net: sctp: NULL pointer dereference in af->from_addr_param on malformed packet]


