[Secure-testing-commits] r33414 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Apr 7 17:12:13 UTC 2015


Author: carnil
Date: 2015-04-07 17:12:13 +0000 (Tue, 07 Apr 2015)
New Revision: 33414

Modified:
   data/CVE/list
Log:
Add two new ntp CVEs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-07 12:52:19 UTC (rev 33413)
+++ data/CVE/list	2015-04-07 17:12:13 UTC (rev 33414)
@@ -2940,10 +2940,14 @@
 	RESERVED
 CVE-2015-1800
 	RESERVED
-CVE-2015-1799
+CVE-2015-1799 [Authentication doesn't protect symmetric associations against DoS attacks]
 	RESERVED
-CVE-2015-1798
+	- ntp <unfixed>
+	NOTE: http://bugs.ntp.org/show_bug.cgi?id=2781
+CVE-2015-1798 [ntpd accepts unauthenticated packets with symmetric key crypto]
 	RESERVED
+	- ntp <unfixed>
+	NOTE: http://bugs.ntp.org/show_bug.cgi?id=2779
 CVE-2015-1797
 	RESERVED
 CVE-2015-1796 [PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation]




More information about the Secure-testing-commits mailing list