[Secure-testing-commits] r54381 - data/CVE

Mon Aug 7 09:20:41 UTC 2017

Author: carnil
Date: 2017-08-07 09:20:41 +0000 (Mon, 07 Aug 2017)
New Revision: 54381

Modified:
   data/CVE/list
Log:
Add CVE-2017-6418/clamav

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-08-07 09:19:33 UTC (rev 54380)
+++ data/CVE/list	2017-08-07 09:20:41 UTC (rev 54381)
@@ -17552,7 +17552,9 @@
 	NOTE: does not have libmspack and thus need to have the fix as well in the
 	NOTE: src:clamav source package.
 CVE-2017-6418 (libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a ...)
-	TODO: check
+	- clamav <unfixed>
+	NOTE: https://bugzilla.clamav.net/show_bug.cgi?id=11797
+	NOTE: https://github.com/vrtadmin/clamav-devel/commit/586a5180287262070637c8943f2f7efd652e4a2c
 CVE-2017-6417 (Code injection vulnerability in Avira Total Security Suite 15.0 (and ...)
 	NOT-FOR-US: Avira Total Security Suite
 CVE-2017-6416 (An issue was discovered in SysGauge 1.5.18. A buffer overflow ...)


