[Secure-testing-commits] r58518 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-13 20:30:15 +0000 (Wed, 13 Dec 2017)
New Revision: 58518

Modified:
   data/CVE/list
Log:
Add CVE-2017-17511/kildclient

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-13 20:26:47 UTC (rev 58517)
+++ data/CVE/list	2017-12-13 20:30:15 UTC (rev 58518)
@@ -174,8 +174,11 @@
 	RESERVED
 CVE-2017-17512 (sensible-browser in sensible-utils before 0.0.11 does not validate ...)
 	- sensible-utils 0.0.11 (bug #881767)
-CVE-2017-17511
+CVE-2017-17511 [argument injection]
 	RESERVED
+	- kildclient <unfixed>
+	NOTE: https://sources.debian.org/src/kildclient/3.1.0-1/src/worldgui.c/?hl=1159#L1159
+	NOTE: https://sources.debian.org/src/kildclient/3.1.0-1/src/prefs.c/?hl=324#L324
 CVE-2017-17510
 	RESERVED
 CVE-2017-17509 (In HDF5 1.10.1, there is an out of bounds write vulnerability in the ...)