[Secure-testing-commits] r48621 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-01-31 17:12:47 +0000 (Tue, 31 Jan 2017)
New Revision: 48621

Modified:
   data/CVE/list
Log:
mp3splt issue unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-31 17:11:25 UTC (rev 48620)
+++ data/CVE/list	2017-01-31 17:12:47 UTC (rev 48621)
@@ -3,9 +3,10 @@
 	NOTE: https://blogs.gentoo.org/ago/2017/01/29/mp3splt-invalid-free-in-free_options-options_manager-c
 	NOTE: https://sourceforge.net/p/mp3splt/bugs/209/
 CVE-2017-5665 [NULL pointer dereference in splt_cue_export_to_file (cue.c)]
-	- mp3splt <unfixed>
+	- mp3splt <unfixed> (unimportant)
 	NOTE: https://blogs.gentoo.org/ago/2017/01/29/mp3splt-null-pointer-dereference-in-splt_cue_export_to_file-cue-c
 	NOTE: https://sourceforge.net/p/mp3splt/bugs/209/
+	NOTE: No security impact, crash in CLI tool
 CVE-2017-5664
 	RESERVED
 CVE-2017-5663