[Secure-testing-commits] r56172 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-26 20:36:11 +0000 (Tue, 26 Sep 2017)
New Revision: 56172

Modified:
   data/CVE/list
Log:
Add dnsmasq issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-26 20:32:16 UTC (rev 56171)
+++ data/CVE/list	2017-09-26 20:36:11 UTC (rev 56172)
@@ -2852,8 +2852,15 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2017/08/27/1
 CVE-2017-13705
 	RESERVED
-CVE-2017-13704
+CVE-2017-13704 [Size parameter overflow via large DNS query]
 	RESERVED
+	- dnsmasq <unfixed>
+	[stretch] - dnsmasq <not-affected> (Vulnerable code not present; Upstream: Regression introduced in 2.77)
+	[jessie] - dnsmasq <not-affected> (Vulnerable code not present; Upstream: Regression introduced in 2.77)
+	[wheezy] - dnsmasq <not-affected> (Vulnerable code not present; Upstream: Regression introduced in 2.77)
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1495510
+	NOTE: http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2017q3/011729.html
+	NOTE: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=63437ffbb58837b214b4b92cb1c54bc5f3279928
 CVE-2017-13703
 	RESERVED
 CVE-2017-13702