[Secure-testing-commits] r28889 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-09-18 07:15:16 +0000 (Thu, 18 Sep 2014)
New Revision: 28889

Modified:
   data/CVE/list
Log:
Add CVE-2014-6423

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-09-18 07:13:58 UTC (rev 28888)
+++ data/CVE/list	2014-09-18 07:15:16 UTC (rev 28889)
@@ -7,6 +7,10 @@
 	[wheezy] - linux <not-affected> (Introduced in 3.7)
 	- linux-2.6 <not-affected> (Introduced in 3.7)
 	NOTE: upstream fix: https://github.com/torvalds/linux/commit/18f39e7be0121317550d03e267e3ebd4dbfbb3ce (v3.17-rc2)
+CVE-2014-6423 [MEGACO dissector infinite loop (wnpa-sec-2014-13)]
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-13.html
+	TODO: check
 CVE-2014-6422 [RTP dissector crash (wnpa-sec-2014-12)]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-12.html