[Secure-testing-commits] r50327 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-04 10:36:15 +0000 (Tue, 04 Apr 2017)
New Revision: 50327

Modified:
   data/CVE/list
Log:
Add CVE-2017-7401/collectd

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-04 10:33:05 UTC (rev 50326)
+++ data/CVE/list	2017-04-04 10:36:15 UTC (rev 50327)
@@ -26,7 +26,9 @@
 CVE-2017-7402 (Pixie 1.0.4 allows remote authenticated users to upload and execute ...)
 	NOT-FOR-US: Pixie CMS
 CVE-2017-7401 (Incorrect interaction of the parse_packet() and ...)
-	TODO: check
+	- collectd <unfixed>
+	NOTE: https://github.com/collectd/collectd/issues/2174
+	NOTE: https://github.com/collectd/collectd/commit/f6be4f9b49b949b379326c3d7002476e6ce4f211
 CVE-2017-7400 (OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 ...)
 	TODO: check
 CVE-2016-10317 (The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex ...)