[Secure-testing-commits] r50500 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-10 04:38:46 +0000 (Mon, 10 Apr 2017)
New Revision: 50500

Modified:
   data/CVE/list
Log:
Add CVE-2017-613/elfutils

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-10 04:19:08 UTC (rev 50499)
+++ data/CVE/list	2017-04-10 04:38:46 UTC (rev 50500)
@@ -5,7 +5,9 @@
 	NOTE: https://blogs.gentoo.org/ago/2017/04/05/binutils-two-null-pointer-dereference-in-elflink-c/
 	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ad32986fdf9da1c8748e47b8b45100398223dba8
 CVE-2017-7613 (elflint.c in elfutils 0.168 does not validate the number of sections ...)
-	TODO: check
+	- elfutils <unfixed>
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21312
+	NOTE: https://blogs.gentoo.org/ago/2017/04/03/elfutils-memory-allocation-failure-in-xcalloc-xmalloc-c/
 CVE-2017-7612 (The check_sysv_hash function in elflint.c in elfutils 0.168 allows ...)
 	TODO: check
 CVE-2017-7611 (The check_symtab_shndx function in elflint.c in elfutils 0.168 allows ...)