[Secure-testing-commits] r55540 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-07 14:24:55 +0000 (Thu, 07 Sep 2017)
New Revision: 55540

Modified:
   data/CVE/list
Log:
add CVE-2017-14167/qemu

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-07 14:23:36 UTC (rev 55539)
+++ data/CVE/list	2017-09-07 14:24:55 UTC (rev 55540)
@@ -26,8 +26,12 @@
 	NOTE: https://github.com/FFmpeg/FFmpeg/commit/9d00fb9d70ee8c0cc7002b89318c5be00f1bbdad
 CVE-2017-14168
 	RESERVED
-CVE-2017-14167
+CVE-2017-14167 [i386: multiboot OOB access while loading guest kernel image]
 	RESERVED
+	- qemu <unfixed>
+	- qemu-kvm <removed>
+	NOTE: https://lists.nongnu.org/archive/html/qemu-devel/2017-09/msg01483.html
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1489375
 CVE-2017-14163
 	RESERVED
 CVE-2017-14162