[Secure-testing-commits] r54520 - data/CVE

security tracker role sectracker at moszumanska.debian.org
Thu Aug 10 09:10:19 UTC 2017


Author: sectracker
Date: 2017-08-10 09:10:19 +0000 (Thu, 10 Aug 2017)
New Revision: 54520

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-10 06:42:55 UTC (rev 54519)
+++ data/CVE/list	2017-08-10 09:10:19 UTC (rev 54520)
@@ -1,3 +1,11 @@
+CVE-2017-12777 (Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some ...)
+	TODO: check
+CVE-2017-12776
+	RESERVED
+CVE-2017-12775
+	RESERVED
+CVE-2017-12774 (finecms in 1.9.5\controllers\member\ContentController.php allows ...)
+	TODO: check
 CVE-2017-12773
 	RESERVED
 CVE-2017-12772
@@ -20,8 +28,7 @@
 	RESERVED
 CVE-2017-12763
 	RESERVED
-CVE-2017-12762 [isdn/i4l: fix buffer overflow]
-	RESERVED
+CVE-2017-12762 (In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied ...)
 	- linux <unfixed>
 	NOTE: Fixed by: https://git.kernel.org/linux/9f5af546e6acc30f075828cb58c7f09665033967 (v4.13-rc4)
 CVE-2017-12761
@@ -34,8 +41,8 @@
 	RESERVED
 CVE-2017-12757
 	RESERVED
-CVE-2017-12756
-	RESERVED
+CVE-2017-12756 (Command inject in transfer from another server in extplorer 2.1.9 and ...)
+	TODO: check
 CVE-2017-12755
 	RESERVED
 CVE-2017-12754 (Stack buffer overflow in httpd in Asuswrt-Merlin firmware ...)
@@ -6156,8 +6163,7 @@
 	NOT-FOR-US: Apache commons email
 CVE-2017-9800
 	RESERVED
-CVE-2017-9799
-	RESERVED
+CVE-2017-9799 (It was found that under some situations and configurations of Apache ...)
 	NOT-FOR-US: Apache Storm
 CVE-2017-9798
 	RESERVED
@@ -13432,6 +13438,7 @@
 	RESERVED
 CVE-2017-7809
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7808
@@ -13439,6 +13446,7 @@
 	- firefox 55.0-1
 CVE-2017-7807
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7806
@@ -13452,18 +13460,22 @@
 	- firefox-esr <not-affected> (Windows-specific)
 CVE-2017-7803
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7802
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7801
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7800
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7799
@@ -13471,6 +13483,7 @@
 	- firefox 55.0-1
 CVE-2017-7798
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7797
@@ -13488,10 +13501,12 @@
 	RESERVED
 CVE-2017-7792
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7791
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7790
@@ -13506,18 +13521,22 @@
 	- firefox 55.0-1
 CVE-2017-7787
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7786
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7785
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7784
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7783
@@ -13535,6 +13554,7 @@
 	- firefox 55.0-1
 CVE-2017-7779
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7778
@@ -13718,6 +13738,7 @@
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/#CVE-2017-7754
 CVE-2017-7753
 	RESERVED
+	{DSA-3928-1}
 	- firefox 55.0-1
 	- firefox-esr 52.3.0esr-1
 CVE-2017-7752
@@ -25726,12 +25747,12 @@
 	RESERVED
 CVE-2017-3754 (Some Lenovo brand notebook systems do not have write protections ...)
 	NOT-FOR-US: Lenovo
-CVE-2017-3753
-	RESERVED
-CVE-2017-3752
-	RESERVED
-CVE-2017-3751
-	RESERVED
+CVE-2017-3753 (A vulnerability has been identified in some Lenovo products that use ...)
+	TODO: check
+CVE-2017-3752 (An industry-wide vulnerability has been identified in the ...)
+	TODO: check
+CVE-2017-3751 (An unquoted service path vulnerability was identified in the driver ...)
+	TODO: check
 CVE-2017-3750 (On Lenovo VIBE mobile phones, the Lenovo Security Android application ...)
 	NOT-FOR-US: Lenovo
 CVE-2017-3749 (On Lenovo VIBE mobile phones, the Idea Friend Android application ...)
@@ -33470,88 +33491,86 @@
 	RESERVED
 CVE-2017-0751
 	RESERVED
-CVE-2017-0750 [A-36817013]
-	RESERVED
+CVE-2017-0750 (A elevation of privilege vulnerability in the Upstream Linux file ...)
 	- linux <undetermined>
 	NOTE: https://source.android.com/security/bulletin/2017-08-01
-CVE-2017-0749 [A-36007735]
-	RESERVED
+CVE-2017-0749 (A elevation of privilege vulnerability in the Upstream Linux linux ...)
 	- linux <undetermined>
 	NOTE: https://source.android.com/security/bulletin/2017-08-01
 CVE-2017-0748
 	RESERVED
-CVE-2017-0747
-	RESERVED
-CVE-2017-0746
-	RESERVED
-CVE-2017-0745
-	RESERVED
+CVE-2017-0747 (A elevation of privilege vulnerability in the Qualcomm proprietary ...)
+	TODO: check
+CVE-2017-0746 (A elevation of privilege vulnerability in the Qualcomm ipa driver. ...)
+	TODO: check
+CVE-2017-0745 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
 CVE-2017-0744
 	RESERVED
 CVE-2017-0743
 	RESERVED
-CVE-2017-0742
-	RESERVED
-CVE-2017-0741
-	RESERVED
-CVE-2017-0740
-	RESERVED
-CVE-2017-0739
-	RESERVED
-CVE-2017-0738
-	RESERVED
-CVE-2017-0737
-	RESERVED
-CVE-2017-0736
-	RESERVED
-CVE-2017-0735
-	RESERVED
-CVE-2017-0734
-	RESERVED
-CVE-2017-0733
-	RESERVED
-CVE-2017-0732
-	RESERVED
-CVE-2017-0731
-	RESERVED
-CVE-2017-0730
-	RESERVED
-CVE-2017-0729
-	RESERVED
-CVE-2017-0728
-	RESERVED
-CVE-2017-0727
-	RESERVED
-CVE-2017-0726
-	RESERVED
-CVE-2017-0725
-	RESERVED
-CVE-2017-0724
-	RESERVED
-CVE-2017-0723
-	RESERVED
-CVE-2017-0722
-	RESERVED
-CVE-2017-0721
-	RESERVED
-CVE-2017-0720
-	RESERVED
-CVE-2017-0719
-	RESERVED
-CVE-2017-0718
-	RESERVED
+CVE-2017-0742 (A elevation of privilege vulnerability in the MediaTek video driver. ...)
+	TODO: check
+CVE-2017-0741 (A elevation of privilege vulnerability in the MediaTek gpu driver. ...)
+	TODO: check
+CVE-2017-0740 (A remote code execution vulnerability in the Broadcom networking ...)
+	TODO: check
+CVE-2017-0739 (A information disclosure vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0738 (A information disclosure vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0737 (A elevation of privilege vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0736 (A denial of service vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0735 (A denial of service vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0734 (A denial of service vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0733 (A denial of service vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0732 (A elevation of privilege vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0731 (A elevation of privilege vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0730 (A denial of service vulnerability in the Android media framework (h264 ...)
+	TODO: check
+CVE-2017-0729 (A elevation of privilege vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0728 (A denial of service vulnerability in the Android media framework (hevc ...)
+	TODO: check
+CVE-2017-0727 (A elevation of privilege vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0726 (A denial of service vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0725 (A denial of service vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0724 (A denial of service vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0723 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0722 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0721 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0720 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0719 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0718 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
 CVE-2017-0717
 	RESERVED
-CVE-2017-0716
-	RESERVED
-CVE-2017-0715
-	RESERVED
-CVE-2017-0714
-	RESERVED
-CVE-2017-0713
-	RESERVED
-CVE-2017-0712
-	RESERVED
+CVE-2017-0716 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0715 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0714 (A remote code execution vulnerability in the Android media framework ...)
+	TODO: check
+CVE-2017-0713 (A remote code execution vulnerability in the Android libraries ...)
+	TODO: check
+CVE-2017-0712 (A elevation of privilege vulnerability in the Android framework (wi-fi ...)
+	TODO: check
 CVE-2017-0711 (A elevation of privilege vulnerability in the MediaTek networking ...)
 	NOT-FOR-US: MediaTek driver for Android
 CVE-2017-0710 (A elevation of privilege vulnerability in the Upstream Linux tcb. ...)




More information about the Secure-testing-commits mailing list