[Secure-testing-commits] r28890 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-09-18 07:16:12 +0000 (Thu, 18 Sep 2014)
New Revision: 28890

Modified:
   data/CVE/list
Log:
Add CVE-2014-6424/wireshark

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-09-18 07:15:16 UTC (rev 28889)
+++ data/CVE/list	2014-09-18 07:16:12 UTC (rev 28890)
@@ -7,6 +7,10 @@
 	[wheezy] - linux <not-affected> (Introduced in 3.7)
 	- linux-2.6 <not-affected> (Introduced in 3.7)
 	NOTE: upstream fix: https://github.com/torvalds/linux/commit/18f39e7be0121317550d03e267e3ebd4dbfbb3ce (v3.17-rc2)
+CVE-2014-6424 [Netflow dissector crash (wnpa-sec-2014-14)]
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-14.html
+	TODO: check
 CVE-2014-6423 [MEGACO dissector infinite loop (wnpa-sec-2014-13)]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2014-13.html