[Secure-testing-commits] r35375 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-07-08 15:22:51 +0000 (Wed, 08 Jul 2015)
New Revision: 35375

Modified:
   data/CVE/list
Log:
Add new wpa issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-08 09:54:31 UTC (rev 35374)
+++ data/CVE/list	2015-07-08 15:22:51 UTC (rev 35375)
@@ -1,3 +1,11 @@
+CVE-2015-XXXX [Incomplete WPS and P2P NFC NDEF record payload length validation]
+	- wpa <unfixed>
+	- wpasupplicant <removed>
+	[squeeze] - wpasupplicant <not-affected> (0.7.0-v2.4 with with CONFIG_WPS_NFC=y)
+	- hostapd <removed>
+	[squeeze] - hostapd <not-affected> (v0.7.0-v2.4 with CONFIG_WPS_NFC=y)
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/07/08/3
+	NOTE: http://w1.fi/security/2015-5/
 CVE-2015-XXXX [CSRF]
 	- sogo <unfixed>
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/07/07/10