[Secure-testing-commits] r37292 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-10-24 10:35:03 +0000 (Sat, 24 Oct 2015)
New Revision: 37292

Modified:
   data/CVE/list
Log:
Add two new exfat-utils issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-24 09:10:11 UTC (rev 37291)
+++ data/CVE/list	2015-10-24 10:35:03 UTC (rev 37292)
@@ -1,3 +1,13 @@
+CVE-2015-XXXX [Heap overflow]
+	- exfat-utils 1.2.1-1
+	NOTE: https://github.com/relan/exfat/issues/5
+	NOTE: https://crashes.fuzzing-project.org/exfatfsck-heap-overflow-write-verify_vbr_checksum
+	NOTE: https://github.com/relan/exfat/commit/2e86ae5f81da11f11673d0546efb525af02b7786
+CVE-2015-XXXX [Endlees loop issue]
+	- exfat-utils 1.2.1-1
+	NOTE: https://github.com/relan/exfat/issues/6
+	NOTE: https://crashes.fuzzing-project.org/exfatfsck-endless-loop
+	NOTE: https://github.com/relan/exfat/commit/35a1f77f9be2d8b21731f758baba4334935bf18b
 CVE-2015-XXXX [XSS in the Icinga Classic-UI]
 	- icinga <unfixed>
 	NOTE: Introduced by: https://dev.icinga.org/issues/593 in 1.3.