[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1114/undertow

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
324542c4 by Salvatore Bonaccorso at 2018-04-30T08:40:07+02:00
Add CVE-2018-1114/undertow

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -25551,8 +25551,11 @@ CVE-2018-1116
 	RESERVED
 CVE-2018-1115
 	RESERVED
-CVE-2018-1114
+CVE-2018-1114 [File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service]
 	RESERVED
+	- undertow <unfixed>
+	NOTE: https://issues.jboss.org/browse/UNDERTOW-1338
+	NOTE: https://bugs.openjdk.java.net/browse/JDK-6956385
 CVE-2018-1113
 	RESERVED
 	NOT-FOR-US: Red Hat specific CVE assignment for Red Hat / Fedora setups (nologin listed in /etc/shells violates security expectations)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/324542c42295723a5b62c6106058d9e199ffe753

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/324542c42295723a5b62c6106058d9e199ffe753
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180430/b5c51c07/attachment.html>