[Secure-testing-commits] r38333 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-12-15 18:29:11 +0000 (Tue, 15 Dec 2015)
New Revision: 38333

Modified:
   data/CVE/list
Log:
Two CVEs assigned for qemu

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-15 18:26:09 UTC (rev 38332)
+++ data/CVE/list	2015-12-15 18:29:11 UTC (rev 38333)
@@ -5,11 +5,18 @@
 	NOTE: Upstream commit (not yet in Linus tree): http://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=09ccfd238e5a0e670d8178cf50180ea81ae09ae1
 	NOTE: https://twitter.com/grsecurity/status/676744240802750464
 	NOTE: https://lkml.org/lkml/2015/12/14/252
-CVE-2015-XXXX [net: vmxnet3: host memory leakage]
+CVE-2015-8568 [net: vmxnet3: host memory leakage -- did not free the transmit & receive buffers while deactivating]
 	- qemu <unfixed>
 	- qemu-kvm <removed>
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/12/15/4
+	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02299.html
+	NOTE: http://www.openwall.com/lists/oss-security/2015/12/15/4
 	TODO: check
+CVE-2015-8567 [net: vmxnet3: host memory leakage -- does not check if the device is active before activating it]
+	- qemu <unfixed>
+	- qemu-kvm <removed>
+	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02299.html
+	NOTE: http://www.openwall.com/lists/oss-security/2015/12/15/4
+	TODO: check
 CVE-2015-8559 [knife bootstrap leaks validator privkey into system logs]
 	- chef <unfixed>
 	NOTE: https://github.com/chef/chef/issues/3871