[Secure-testing-commits] r50523 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-10 10:02:29 +0000 (Mon, 10 Apr 2017)
New Revision: 50523

Modified:
   data/CVE/list
Log:
Associate CVE-2016-151{6,7} with opencv

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-10 09:10:14 UTC (rev 50522)
+++ data/CVE/list	2017-04-10 10:02:29 UTC (rev 50523)
@@ -46641,9 +46641,15 @@
 CVE-2016-1518
 	RESERVED
 CVE-2016-1517 (OpenCV 3.0.0 allows remote attackers to cause a denial of service ...)
-	TODO: check
+	- opencv <undetermined>
+	NOTE: https://arxiv.org/pdf/1701.04739.pdf
+	NOTE: https://github.com/opencv/opencv/issues/5956
+	TODO: check, most likely all opencv versions affected
 CVE-2016-1516 (OpenCV 3.0.0 has a double free issue that allows attackers to execute ...)
-	TODO: check
+	- opencv <undetermined>
+	NOTE: https://arxiv.org/pdf/1701.04739.pdf
+	NOTE: https://github.com/opencv/opencv/issues/5956
+	TODO: check, most likely all opencv versions affected
 CVE-2016-1515
 	REJECTED
 CVE-2016-1514