[Secure-testing-commits] r58453 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-11 09:19:09 +0000 (Mon, 11 Dec 2017)
New Revision: 58453

Modified:
   data/CVE/list
Log:
Add new hdf5 issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-11 09:15:36 UTC (rev 58452)
+++ data/CVE/list	2017-12-11 09:19:09 UTC (rev 58453)
@@ -73,15 +73,20 @@
 CVE-2017-17510
 	RESERVED
 CVE-2017-17509 (In HDF5 1.10.1, there is an out of bounds write vulnerability in the ...)
-	TODO: check
+	- hdf5 <unfixed>
+	NOTE: https://github.com/xiaoqx/pocs/blob/master/hdf5/readme.md
 CVE-2017-17508 (In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function ...)
-	TODO: check
+	- hdf5 <unfixed>
+	NOTE: https://github.com/xiaoqx/pocs/blob/master/hdf5/readme.md
 CVE-2017-17507 (In HDF5 1.10.1, there is an out of bounds read vulnerability in the ...)
-	TODO: check
+	- hdf5 <unfixed>
+	NOTE: https://github.com/xiaoqx/pocs/blob/master/hdf5/readme.md
 CVE-2017-17506 (In HDF5 1.10.1, there is an out of bounds read vulnerability in the ...)
-	TODO: check
+	- hdf5 <unfixed>
+	NOTE: https://github.com/xiaoqx/pocs/blob/master/hdf5/readme.md
 CVE-2017-17505 (In HDF5 1.10.1, there is a NULL pointer dereference in the function ...)
-	TODO: check
+	- hdf5 <unfixed>
+	NOTE: https://github.com/xiaoqx/pocs/blob/master/hdf5/readme.md
 CVE-2017-17504 (ImageMagick before 7.0.7-12 has a coders/png.c ...)
 	TODO: check
 CVE-2017-17503 (ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a ...)