[Secure-testing-commits] r55359 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Sep 1 06:40:14 UTC 2017


Author: carnil
Date: 2017-09-01 06:40:14 +0000 (Fri, 01 Sep 2017)
New Revision: 55359

Modified:
   data/CVE/list
Log:
Add new asterisk issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-01 05:33:14 UTC (rev 55358)
+++ data/CVE/list	2017-09-01 06:40:14 UTC (rev 55359)
@@ -1,3 +1,12 @@
+CVE-2017-XXXX [AST-2017-007: Remote Crash Vulerability in res_pjsip]
+	- asterisk <unfixed> (bug #873909)
+	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-27152
+CVE-2017-XXXX [AST-2017-006: Shell access command injection inapp_minivm]
+	- asterisk <unfixed> (bug #873908)
+	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-27103
+CVE-2017-XXXX [AST-2017-005: Media takeover in RTP stack]
+	- asterisk <unfixed> (bug #873907)
+	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-27013
 CVE-2017-14077
 	RESERVED
 CVE-2017-14076 (SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id ...)




More information about the Secure-testing-commits mailing list