[Secure-testing-commits] r52958 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-27 18:46:50 +0000 (Tue, 27 Jun 2017)
New Revision: 52958

Modified:
   data/CVE/list
Log:
Add temporary description for CVE-2017-9445 and more notes

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-27 18:44:44 UTC (rev 52957)
+++ data/CVE/list	2017-06-27 18:46:50 UTC (rev 52958)
@@ -2639,11 +2639,14 @@
 	RESERVED
 CVE-2017-9446
 	RESERVED
-CVE-2017-9445
+CVE-2017-9445 [Out-of-bounds write in systemd-resolved with crafted TCP payload]
 	RESERVED
 	- systemd <unfixed>
 	[stretch] - systemd <no-dsa> (Minor issue, systemd-resolved not enabled by default)
 	[jessie] - systemd <not-affected> (Vulnerable code not present)
+	[wheezy] - systemd <not-affected> (Vulnerable code not present)
+	NOTE: Introduced by: https://github.com/systemd/systemd/commit/a0166609f782da91710dea9183d1bf138538db37
+	NOTE: http://www.openwall.com/lists/oss-security/2017/06/27/8
 CVE-2017-9444 (BigTree CMS through 4.2.18 has CSRF related to the ...)
 	NOT-FOR-US: BigTree CMS
 CVE-2017-9443 (** DISPUTED ** BigTree CMS through 4.2.18 allows remote authenticated ...)