[Secure-testing-commits] r57753 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-17 22:41:54 +0000 (Fri, 17 Nov 2017)
New Revision: 57753

Modified:
   data/CVE/list
Log:
Add CVE-2017-16869/upx-ucl

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-17 22:41:43 UTC (rev 57752)
+++ data/CVE/list	2017-11-17 22:41:54 UTC (rev 57753)
@@ -54,7 +54,8 @@
 CVE-2017-16870 (The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the ...)
 	NOT-FOR-US: UpdraftPlus plugin for WordPress
 CVE-2017-16869 (p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of ...)
-	TODO: check
+	- upx-ucl <unfixed>
+	NOTE: https://github.com/upx/upx/issues/146
 CVE-2017-16868 (In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not ...)
 	TODO: check
 CVE-2017-16867 (Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 ...)