[Secure-testing-commits] r47288 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-21 16:32:39 +0000 (Wed, 21 Dec 2016)
New Revision: 47288

Modified:
   data/CVE/list
Log:
Add notes for CVE-2016-2161/apache2

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-21 16:32:29 UTC (rev 47287)
+++ data/CVE/list	2016-12-21 16:32:39 UTC (rev 47288)
@@ -33079,10 +33079,12 @@
 CVE-2016-2162 (Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale ...)
 	- libstruts1.2-java <not-affected> (Only affects 2.0.0 to 2.3.24.1)
 	NOTE: http://struts.apache.org/docs/s2-030.html
-CVE-2016-2161
+CVE-2016-2161 [DoS vulnerability in mod_auth_digest]
 	RESERVED
 	- apache2 <unfixed>
 	NOTE: https://lists.apache.org/thread.html/139862b41c0dfd5e6e00ad89c00119f9faf0dd41a2f927da9c9a4076@%3Cannounce.httpd.apache.org%3E
+	NOTE: Affects: 2.4.1 to 2.4.23
+	NOTE: Fixed in 2.4.25
 CVE-2016-2160 (Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote ...)
 	NOT-FOR-US: OpenShift
 CVE-2016-2159 (The save_submission function in mod/assign/externallib.php in Moodle ...)