[Secure-testing-commits] r41189 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Apr 26 05:08:23 UTC 2016


Author: carnil
Date: 2016-04-26 05:08:23 +0000 (Tue, 26 Apr 2016)
New Revision: 41189

Modified:
   data/CVE/list
Log:
CVE-2016-408{3,4}/wireshark assigned

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-26 05:04:23 UTC (rev 41188)
+++ data/CVE/list	2016-04-26 05:08:23 UTC (rev 41189)
@@ -1,9 +1,5 @@
 CVE-2016-4085 (Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in ...)
 	TODO: check
-CVE-2016-4084 (Integer signedness error in epan/dissectors/packet-mswsp.c in the ...)
-	TODO: check
-CVE-2016-4083 (epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark ...)
-	TODO: check
 CVE-2016-4075
 	RESERVED
 CVE-2016-4067
@@ -50,11 +46,16 @@
 	NOTE: https://github.com/roundcube/roundcubemail/commit/40d7342dd9c9bd2a1d613edc848ed95a4d71aa18
 	NOTE: https://github.com/roundcube/roundcubemail/commit/7bbefdb63b12e2344cf1cb87aeb6e3933b4063e0 (release-1.1)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/04/23/3
-CVE-2016-XXXX [MS-WSP dissector crash]
+CVE-2016-4084
 	- wireshark 2.0.3+geed34f0-1 (low)
 	[jessie] - wireshark <not-affected> (Only affects 2.x)
 	[wheezy] - wireshark <not-affected> (Only affects 2.x)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-27.html
+CVE-2016-4083 [MS-WSP dissector crash]
+	- wireshark 2.0.3+geed34f0-1 (low)
+	[jessie] - wireshark <not-affected> (Only affects 2.x)
+	[wheezy] - wireshark <not-affected> (Only affects 2.x)
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-27.html
 CVE-2016-4082 [GSM CBCH dissector crash]
 	- wireshark 2.0.3+geed34f0-1 (low)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-26.html




More information about the Secure-testing-commits mailing list