[Git][security-tracker-team/security-tracker][master] Add CVE-2018-14526/wpa

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
389a58ea by Salvatore Bonaccorso at 2018-08-08T15:03:33Z
Add CVE-2018-14526/wpa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1616,8 +1616,12 @@ CVE-2018-14528
 	RESERVED
 CVE-2018-14527 (Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection ...)
 	NOT-FOR-US: Xiao5uCompany
-CVE-2018-14526
+CVE-2018-14526 [Unauthenticated EAPOL-Key decryption in wpa_supplicant]
 	RESERVED
+	- wpa <unfixed>
+	NOTE: https://w1.fi/security/2018-1/unauthenticated-eapol-key-decryption.txt
+	NOTE: https://w1.fi/security/2018-1/0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
+	NOTE: https://w1.fi/security/2018-1/rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
 CVE-2018-14525
 	RESERVED
 CVE-2018-14524 (dwg_decode_eed in decode.c in GNU LibreDWG 0.5.1048 leads to a double ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/389a58ea755aebcefb1524e4495d1baa2c47bdd6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/389a58ea755aebcefb1524e4495d1baa2c47bdd6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180808/93026827/attachment.html>