[Secure-testing-commits] r34845 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-06-10 14:19:54 +0000 (Wed, 10 Jun 2015)
New Revision: 34845

Modified:
   data/CVE/list
Log:
Add CVE-2015-3209/{qemu,xen}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-10 12:55:58 UTC (rev 34844)
+++ data/CVE/list	2015-06-10 14:19:54 UTC (rev 34845)
@@ -2699,8 +2699,13 @@
 	NOTE: Fixed by: http://vcs.pcre.org/pcre?view=revision&revision=1558
 	NOTE: Affected code refactored in: http://vcs.pcre.org/pcre?view=revision&revision=1359 (8.34)
 	NOTE: Issue then introduced by: http://vcs.pcre.org/pcre?view=revision&revision=1361
-CVE-2015-3209
+CVE-2015-3209 [heap overflow in qemu pcnet controller allowing guest to host escape]
 	RESERVED
+	- qemu <unfixed>
+	- qemu-kvm <removed>
+	- xen 4.4.0-1
+	NOTE: Xen switched to qemu-system in 4.4.0-1
+	NOTE: http://xenbits.xen.org/xsa/advisory-135.html
 CVE-2015-3208
 	RESERVED
 CVE-2015-3207