[Secure-testing-commits] r43703 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-08-01 18:36:38 +0000 (Mon, 01 Aug 2016)
New Revision: 43703

Modified:
   data/CVE/list
Log:
Add first batch of CVEs for wireshark

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-08-01 18:33:29 UTC (rev 43702)
+++ data/CVE/list	2016-08-01 18:36:38 UTC (rev 43703)
@@ -72,30 +72,34 @@
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12624
 	NOTE: Affects 1.12.0 to 1.12.12, fixed 1.12.13
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/07/28/3
-CVE-2016-XXXX [WSP infinite loop (wnpa-sec-2016-42)]
+CVE-2016-6506 [WSP infinite loop (wnpa-sec-2016-42)]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-42.html
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12594
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a9d5256890c9189c7461bfce6ed6edce5d861499
 	NOTE: Affects 2.0.0 to 2.0.4, 1.12.0 to 1.12.12 , fixed in 2.0.5, 1.12.13
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/07/28/3
-CVE-2016-XXXX [PacketBB dissector could divide by zero (wnpa-sec-2016-41)]
+	NOTE: http://www.openwall.com/lists/oss-security/2016/07/28/3
+CVE-2016-6505 [PacketBB dissector could divide by zero (wnpa-sec-2016-41)]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-41.html
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12577
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=94e97e45cf614c7bb8fe90c23df52910246b2c95
 	NOTE: Affects 2.0.0 to 2.0.4, 1.12.0 to 1.12.12, fixed in 2.0.5, 1.12.13.
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/07/28/3
-CVE-2016-XXXX [NDS dissector crash (wnpa-sec-2016-40)]
+	NOTE: http://www.openwall.com/lists/oss-security/2016/07/28/3
+CVE-2016-6504 [NDS dissector crash (wnpa-sec-2016-40)]
 	- wireshark 2.0
 	NOTE: Only affects 1.12, marking 2.0 as fixed
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-40.html
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12576
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9eacbb4d48df647648127b9258f9e5aeeb0c7d99
 	NOTE: Affects 1.12.0 to 1.12.12, fixed in 1.12.13.
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/07/28/3
-CVE-2016-XXXX [CORBA IDL dissector crash on 64-bit Windows (wnpa-sec-2016-39)]
+	NOTE: http://www.openwall.com/lists/oss-security/2016/07/28/3
+CVE-2016-6503 [CORBA IDL dissector crash on 64-bit Windows (wnpa-sec-2016-39)]
 	- wireshark <not-affected> (Only affects Wireshark on Windows)
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2016-39.html
 	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12495
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/07/28/3
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=581a17af40b84ef0c9e7f41ed0795af345b61ce1
+	NOTE: http://www.openwall.com/lists/oss-security/2016/07/28/3
 CVE-2016-6490 [virtio: infinite loop in virtqueue_pop]
 	RESERVED
 	- qemu <unfixed> (bug #832767)