[Secure-testing-commits] r53706 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-20 12:17:51 +0000 (Thu, 20 Jul 2017)
New Revision: 53706

Modified:
   data/CVE/list
Log:
mark CVE-2017-11362 as unimportant


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-20 12:08:00 UTC (rev 53705)
+++ data/CVE/list	2017-07-20 12:17:51 UTC (rev 53706)
@@ -278,11 +278,12 @@
 CVE-2017-11363
 	RESERVED
 CVE-2017-11362 (In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ...)
-	- php7.1 <unfixed>
-	- php7.0 <unfixed>
-	- php5 <removed>
+	- php7.1 <unfixed> (unimportant)
+	- php7.0 <unfixed> (unimportant)
+	- php5 <removed> (unimportant)
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=73473
 	NOTE: Fixed in 7.1.7, 7.0.21
+	NOTE: Only triggerable by malicious script
 CVE-2017-11361 (Inteno routers have a JUCI ACL misconfiguration that allows the "user" ...)
 	NOT-FOR-US: Inteno routers
 CVE-2017-11360 (The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a ...)