[Secure-testing-commits] r54159 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-08-01 08:03:04 +0000 (Tue, 01 Aug 2017)
New Revision: 54159

Modified:
   data/CVE/list
Log:
Add CVE-2017-11331/vorbis-tools

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-01 08:03:00 UTC (rev 54158)
+++ data/CVE/list	2017-08-01 08:03:04 UTC (rev 54159)
@@ -1298,7 +1298,9 @@
 	[jessie] - sox <no-dsa> (Minor issue)
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/81
 CVE-2017-11331 (The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 ...)
-	TODO: check
+	- vorbis-tools <unfixed>
+	NOTE: The issue is "covered" by the fix applied in 0016-oggenc-validate-count-of-channels-in-the-header-CVE-.patch
+	NOTE: still the return of malloc is not checked.
 CVE-2017-11330 (The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in ...)
 	NOT-FOR-US: DivFix++
 CVE-2017-11329 (GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php ...)